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(57; A system tor eentKsfltrig «ss and distr^utim of 
tiigiiai vwks. Ths pfssaru invsoijon aJksws the owner ot- 
a ds§®& -mik >o aiiach usage rioi «s H ASOs jo ihsir work. 
The usage rtojUs define how She if-dwctei cssgiMji svc;;k 
may r>« ussd and «itstf!»utsd (1451} irssissicss ot usage 
eoh& a;e dotted using « flexible and extensible usage; 
righie gf^vnat concsptuaiSy. a tight in the usage rsghts 
grasnrrar is a Sabst associated wish a p; edistesrrtfesei de- 



fer controf Hrsg the disiriteutbn and um of digital works utilizing a usag« rights 



fcavjor an« coflciitsoos !fi sxercising iris rigrtf Tr>« behsy- 
for o! a usage rsgm is embodied in & pmdmmms sei 
(1452s Off usjjgs irsnssffuons steps. The usage isansiao 
Uort stops further chse* a!t eomfiBofis <t483-145?) 
which nuisi be ssuisfied before the rigbi may i?s exer- 
cises. These usags transaction sssps detos s protocol 
to; requesting ths exercise ot a-i\qbl s«d ihe carrying 
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OesoHpsJsm 

The prssani invert; we retssss to the field of distdsuSion and usage rs^his enSorcemenf tw diejiSaliy encoded woess. 

A furtdamerttai mm facing me publishing and Iniormatlon industries as they cortssdsr etec-tftjoic publishing is how 
•s So pt raven- she Drtaoihowed and nnacssoyri-ed dtoMoti or ussaos o! etse;r«»c»iiy published rcaiefials. fXiecbonicsiiy 
published rnsfissials are sypscaiiy distributsd in a digstaf torrn and rsersafed on a computer based system having ins 
capability so tecfsstg Shi; material. Audio and video recGtdtrtgs. software, it-coks and muftimedia wotks as© aH being 
oieotfoncaiiy pubismed. Companies in moss. tnciosfrms receive roywas for each accoumM for a'aisvery of fhe mste- 
eats, e g. the sale of an audio CD at a retail outiet. Any unaccounted distribution dt a vsors mates in an unpaid soyaffy 
?<5 (e.g. s>opytog tfta audio recording CD to anoines digital medium.) 

The eas« in ssshk;h else-roojoaiSy pubitshed «»rks nan be "gen'ssi-iy* mpioducad arid dislnbuSssd is a major concern, 
"file transmission ol digital works <y.'8f neSAWXKs ss comrnohssteee One such widely used ostwosiv is \m internet. Ths 
Internet ess a vwdssprsad nahsosktaellisy by which computer usess m srsany unsversriies. corporations and govern mss;t. 
es^siie-icrxunvjuicsha and trade ideas arid information. Corrsp uter bt; ■ > i?i boards founder) she interne; anci cornrrasrcssi 
« network&sucn as Compose?* csncs Prodigy aiioaf tor the pc&ingwKi rt'trte«got digital irtormsaon ioforrftafcon serystss 
such as Diafeg and t.EXlS/hiEXIS provide dateba&es o? curr*»-s5 rciowation on a wide variety of top i A x 1* facto; 
whsch wttt sisacerSsafe tn« situation « the development arid nxpassstan of the Nsshooal information tnttttstrueJufs f)hs 
NM>. it ts anticipated thai, as the Ha grows, ins tssmreissson erf digiiai works over networks will increase many times 
over ii would fits desirable to ufilisse the Mil for drsmesaiori of dtglSal wotks wiihont ths; tea- of wi;ios.n o { ^ snShorKiid 
r.cpvmg. 

Ths rnosi s,t:atgbito:'wa:xi way ;o cu?b sec c-un-ed disir:but;on is to prsv<jn; un«yibor«ed cop*, no - \j ^raism*- 
sion. For sxistsrsg rfiatsnais ifiat are dissisibuied in digital :;srn. vafious ss'agnaidsi ars ussd. m tns cssss of sdivsara 
copy pioisnfion sshoraas whicb W tba nwtow <sl ca&m lhat oan ba m<jds or whicn cor jyp; fhe ouipijt whan ccspysng 
is dsissteci have been smpfey«d. Anotiisr scftwis causes sottwaie so become disabled after a prscfetsrmwd psnod 
oi sirm Sjas lapsfKi. A tochnique usod for worksiafson sollwars is jo raqniio vt\si a sspoctai fianiw;sri3 d;;v;s;a trsiis! 
depfssonicntho V¥orks;af:ion incrdeffonhssoftmfStforan. a. a., sss US-A-4.9S2..0S4 »n}!t{«d "Meshed and Apparaisjs 
lor Protecftng Compiitsf Sottyrare Utilising Codod Fiifsr Nslwofkin Coninnorion mi m Active Codsd Haftiwafe Dsvsco. 
" Soeh cfevtesa ars provided v«fh the aoftwase a!5d are commonly referred So as ttongtes 

Yat: asiosnof schasrso is to Osstribats sofiwara. bat wf5!0b rsqniras a "-say'' to onafois sis uso Tdis is aj-npiaysd in 
se distflbciion schemes whew 'demos 0 of she software are provided on a awfom afoag wish the entire proauct. The 
dsspoc issn Ssa isaaiy «s«>ci. bus in osdar to ;jse m acfyai product, fbc H«y must da p-jrcSiaasd. 1>;asa oahass^s do not 
hindsf eopyli-ig or tiisi software once %m k&y is W«y pcrchassd. 

is is an ob|£jci of she pr;?ser;i inventors so prcwid© an tmpsovosi sysienj and fmtttcd fa conttoiimg 9m uss and 
distribution of digiSal works. 

The invention accordingly provides a system and msihod as claimed m the accompanying clalrm. 

AsysJtoiTifo: coi;t)'oliinq as« and dlssrfcsjisonol digisai works is disclosed. A digital work ss any writtery aarai. graph-- 
ical or video cased work that has been translated to or created In a digital form, anc which can os recs'eafed using 
SLiisable fcnderirsg iiieans such as software piograsns, Ttte psesenf iiivenfiors aliows Ihs owrsof ol a digital work to attach 
aaaga rights !o shcif wosk The nsaoe itgijis dsiim now the csipkai wo?f< snay be sjsed ssfid o^55rfcuf'«si. Tnesss .usages 
•so rsgnts bscorna past of ths digiiai work aod are always honored. 

instances of usage rsghis are defrnssd using a ■laddie and oxtsjnsidie nsarje debts ^rajywar Concept uaiiy. a nghs 
If} ibe sisags; r:gtiis grammar is a label assocta-ed with a psedosersnsned betsavsot and conditions to axescissng She right. 
Fes eaanipfe. a COP V ftohs denafe& iha; a copy ot the digital vvosk may bs made A ccndilton to excfcising the fight Is 
thai She rsquss;er roust pass csstain security cdisria Conditions >?>ay also da attached to km Is the ngtss itsoli For 
& axampsa.. a LOAN ssght may be datfnad so as to iimtt shss efwratiewt ol wtseh a wars; may ae i.OAhiao. 

fn the pnssern Inventior! a usage fight is comprised of a ugnt code aiong wiih ths various conditions tor essressing 
ti'ic right. Such coiidiiio!5s inssluds a copy-count corsdiiion for limiting ths numbor ot tie s5es a right can tj3 concusremty 
f^acclsad (s.a. iisTisttha nurnbar of copls*son loan tosomo predetermined nsimhor}. a ssscusisy das* condlilcnfor Insuring 
shat.a sopossfory tias m apptoprlats isvai of s-ecursiy access corsdssons for specifying access tesss thai must be passscd, 
viJ a flma spsclflcatioi lor indscaiing flms? based consiralnis for exercising a right arid a- fa® specification for insiiaatsnp 
usage fees for the exercise of a tight A digiiai work may have dlffsreni versions of a right attached thereto. A version 
ol a sight wilt hsve toe sasTie sight code as other versions, bsa ths condlsiorss (arses typically shs fees! woutd be different. 

Digits! works and fbals aiiachsd nsaga irgtiis ars stored « rcpositor:es. Qigtiai wctks arc- trancrrsiflsd bssiwoan 
feposltofiss Repositories interact to sxeharsge digital works acooi-arog so a predesormined set of sisage transactions 
ssepss; The bsh&vtor ot a sjsaga sight « cnibodts-d to a psedsjfesraii'usci sat of usage frasisactions siops. Ths; usage 
trsinsaciioii slaps f-aihar cneck a!! condtilons which mas? ba satisfied baf ore iha right mssy bo exercised: These -jsaga 
transaction steps define a &isJseof imd by the reposifortas tor rsgaestlng the exercise of a right and the carrying out 
ol a right. 
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A system w& tmibod m accoKWsss w«n the Invention will now m deserted syvsey of esampls, witb rsfsfencs 
lo tns scoomptanying. dtriwrigs. «n which - 

Figure 1 is a tiowchart iifusrrailnp a simple ftstsnttmron of tbs operates of Shs currently pretsmxl embodimsnt of 
the present ymrtxm. 

s Figure 2 is a btocK diagram itiuorrailug the various ieposiiory types and -he repository tfafssactsots flow betwsars 

thsm m Jhs c«««n% preferred errtrxidrrnen; of ;he present reversion. 

Figure 3 is 3 titek diaqram d « repository counted With 8 c;edii server in the currently preferred smtsoSsYisnt ot 
;ne present inveniion 

Figures 4a and 4i> are escampies of rendering system ss nay be utfeed in she aw&ntt? sfsrerred embodimenf 
?<5 of ihe present invsmion. 

Figure 5 riiusirafes a cornet!! s tile layout 'for a digites work ass way be nttes-d in the cur r onrly preferred embodiment 
at me -present rovon-ron. 

Figure 6 illustrates a contents- site iayout to; m individual dlglsai work ot she dsgrtai work of Figure 5 as may be 
u$ilte«ci m the currenily pfeterren embodiment of fhe jxwn! invert son. 
« Figure- >' iiiustraies ins cft-vjponsnts ot a descnpsion block, ot the currently prei'su-so srnbodifrssnt ot the w&mii 
snv's-nPon. 

Figure 8 Illustrates a description tr« for ihe contents trie layout of the di-gsta! vsock (fostrated sn Fhjm?8 6. 

Figure 9 illustrates a pastor* of a description tree corresponding ;o the sndtviouai o'sgesi ww* siusirated in Figure 6. 

Figure 1 0 slicstf ares a layour tor the rights portion ot a descriptor! block as may bo uutaed so she twenty psetsrred 
embodiment of the pressnf invention. 

Figure i'i is « description tree vshsrsin certain d-blocks ha^s FRIMT usage righis and Is used \o illustrate "sifter 
and 'lenieni* r\jtes lor resolving usage rights contacts. 

Figure 1 a js a block diagram ol the hardware componorrts ot s repository <j;s are mus& m me eurr sntiy prsl«ff«« 
omnodirriorii ot ino present wentfeo. 

Figure 1 3 is; a block diagram ol tbe funetiODai (!©g:cai! cornponents of a repositosy < ! « ar« usifesd if} ths-««f«m!(y 
prsisrrso smbrxti-r-srit ct ths pmsant mention. 

Figure i 4 i& dtegmm illustrating ha bmic eoroponents of a usage ogm »> tne currenily prslerrsd ernbodirnsnt ot 
the ptssam invsiitiot;. 

Fig^ffS is 1*9*6 ttie mugs risbis gfa^mar ol mo cufrsniiy prelorrob ^ttodomnt ot tno present ir-vontion 
st> Figure Jo is a tloscttaP lliostratsng tiie steps ot csps Scale deiivsry tsotiist cheeking and perfornwtcs lasting as 
performed in a rssgistnsion trarissactiofi as nmy m peflorrnod m this curfsa^tty prisfofrsd ombohisTiont »r )bs psosssif 
invention. 

Figure t ? :s a tiowchaP illustrafsng ihs steps of session snfomiaSsori exchange ar;d cloac synchrofisxattcsf) as may 
bs psdormsd m tne tvo&titty prelerrod jsrebooirrssoi ot ;no prsssnt irsvor..|at>, after sash roposaory m \m registration 
transaolion has soccesstuiiy compistsd the steps desrrrlbed la f Igurs 1 6. 

Figure IS is a fiowsjhan ittusinailng shs basic flow for a asagc tiarisaetsor;. ifscludir.g she common Gpersing and 
closing step, ss msy foe psfs'ormscs in the oprrenfly proterrsd embodireeni of ths prsseni Itw&nflon. 

Figure 1 9 ss a stale diagram of sasvsr srsd cllcni tepoBllorics in accoraancs wtit; a transport piolocoi toitawad wtian 
moving a dlgiiai msik from tbe ssrvot ro Ibeciicr;. repositories, as may bo pericrrnea m -he ourrrmtiy ssrsferfeooirsbod- 
•to im&nt of the presonr invss-f lon. 

A systsm to; soritrollina am and dsstrlbetiGn ol digital vsorks is disclosed. The prsser;; invention is dssectsa' to 
srippoPing commomias ••'ansrictiorsS invtsivrng digital works. 

Hsrern ths tsmis "cii9itsi want*, *wofi>" and "ccntenf refecso any i*ork mar has bson reduced to a drgitai repre- 
sensatiorr, Thss would iriclads any audio, video tasl. or n-ustireadia work and any ssoorepsriyino siisrpretsr ie g. sotr- 
wars! Ihat may be rec-airsd fo? recraaf iag the vsork. Tno refm comooBiio work i-otsrs to a rtigrtai wofis cotrspfisad of a 
co!tecttor>ot o-het digital works, Triaien^ K usags oghts" « "fights" m a tsms whrch refers so rights gtrBiiadtoa rsciplent 
5e of a (igiiat wx«. Oertsre-iy, Ibese nghis defee-hew a sisgjfsi wotfc can oe assKi and tf it ran be tanher disthb^tud. Eacn 
usage fight, wiay havs one or mors specified oonaiKons <0m must be saasiioa botors ins right msy bs exomisos. 

Figuie i is a hlqh iev^ flowchart omlltmg various o&lmte but which dsmonsfrafes the b«sic operation ot tha present 
iri«mi:Qn. Retsrrsng to Figure t. a cteator cseatas a dlgiiai work, stsp 101 "hoaeaforwiil ifjendrytsrrmineappropriaie 
usage rigrrrs and toss, aimcb ihsm lo the dlgitai ««ork. and siors them sn F}sposiiory t . step t02 'The doterroinaiion ot 
appropilats esage ngnis and leas %lil dspend on various acorsonnc faelors. The digital mxk mtwasr® secuseiy m Be- 
posrrory i untii a request lor access is rscesvecS: The ioqrjesi tor atreess Oegins with a session inlrration by anofher 
rsjxjstawy. Hare a fjeoosuofy 2 inmates a session vvrth Repository sisp 103. As will es oescribsd in qmW ttem 
beiow, thss session tonisticn mofudes s;eps vvnieh helps to mum ihnl Iba rsspectrva repositories am Uwtmtifcy. As- 
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sumng mat 8 session can oe established. Repository £ may thea request access to the Digital Work for a ■stated 
purpose, step 104 Ths purpose may tss, for ©earopte; so pnnt the dsq.:tai work or !o obtain a espy at the diktat work. 
The purpose writ consspond to a specie usagg right m sny event. BsposiScxy 1 checks ths usage fighiS'assccsaies* 
wrth the digital work to detemiine if the access to the digital work may be granted, step 105. The check of the usage 
•5 fights esssotiaiiy evolves- a tietsmmtation of whether a right associated wish the access raquesS has been attached to; 
ths di^ts! work and ifss eoruSSsons associated w*r> me ngnt ar 3 sstssfred jt ths .access is <ie«(ecf. repository 1 tamsin&tss 
the session w:th an error rnes-&ag© : step 1 08. if access :s granted, repository 1 tfartstntts the- dlgiiai work to repository 
2, step ID?. Once the osgstai work has been transmitted to repository 2. reposssory i asKtSsach generate biiiinp, intor- 
mtttton for ;na access which is tr&nsmstfsc- to a credit *mvw. stop 108. Such coofeie »ng reporting $ oione to insure 
?e «f§8tnst attempts ;o citcumverit she bifling process. 

figure 2: iiinstrates the use interactions be; wear ■ repository types in ths present tnvsntkia As wiii eecome appar eni 
from Figure 2, Sis various repository types wiii serve atifsfsnt tunctioRS. Si is tunoamensa) toai repositories wB snars 
st core ssi oi funeiicmsitfy which wiit enabie meats and trussed coninwotaatfcsns. Referring tc Figure 2. a repository 
S05 represents she generai instance ot a repository: Ths repository 20"! has im modes ot operation; a server morSe 
« and a requestor mm. When m the server mods, the repository wi be receiving and processing access requests to 
digital works. Whs;? in the requester mode, ths repository veil be iniEiatsno, requests to access diets*: works. Repository 
201 ;s peroral in ths sense that its primary purpose ;s as an exchange rosste tor digital works. Owing :«e course of 
operation, the repository 201 may communicate with a piurafity ot other repositories, nam-eiy authorization repository 
203 rendering, repository 203 and master repository 204. Cfiarfsrwfiicalscsf} bsiweer; repositories occ«s uSllklrsq a rs- 
28 pository traesaotion protocoi 206. 

Oommunicatio?-: wsth an aaihorizatsoii reposkory 202 may occur when a digital wofKfc0io§ scasssed has a cohdstsors 
requ8it>3 an aeshois^aiioir Co;5cesmasty an arabor sxaiior; is a Pigriai esrtitieato such i;5at possession ot the csrtsticate 
ts required to gain access to Sno dioria; work. An asjthori^ation >s iisrsit a digitai work ;h&S ear; do moved sjetwaee 
repositories ano stfbjeetsci to teas and usage riahss condsjfoos. Art anthdaxaiion msy oe required by bosh repositories 
irwoived m an access So a cfccjitai work. 

Commariicaticn wsto a rendering fcqosisofy 203 occurs m eofinsciicn with ths rsnosring oi a Oigitai w ; ork As m 
be described Irs greater detail below, a residenuq repository Is coupied wl;b a rsftbsrsng devrce rs.q a printer device) 
to copse a resxiortrsg systsm 

Oommanieaiion with a rnasicr reposisory 205 occurs m connection with ootaining m irjenslfscation eersiticate. ioarv- 
se titfcr-iiion cs<ftit!C8tes are ihe menrrs by which a repository « identified a.s 'trustwortby' The u ?e ot Idantliieeiion certif- 
icates is descrrceb: deiow with respeci to me registration transaction. 

Figure 3 siiusirstes the repository 201 eoupfed to a credit sssrver 301. The credit server 30t is e device shloh 
accurrss.iiaies hlliirsp insorinahon lor ths repositosy 20t. Ths credit server 301 corrssrurrsfcaies «':th repositosy 20t via 
bsiiieg transactions 202 to record Mi:ng iran sac- ions. Burnt} transactions are reported to a biiisnp ciearinphousa 302 
-ts by the credit sewer 30"! on a per<odie basis Ths credit sews 301 communicates io the b:ikng clenrlngi";oese 30S vie 
clearinghouse transactions 304 The cieai inghossis transarsions 004 enabis a secure and encryptsd tiarisrrisssior; of 
intotmation to toe biiiing ctearinghoass 303. 

40 

A reridersng system is qeueraiiy defined as a system comprising s repository and a rendering device which can 
render a dfgiiai work into lis sSssired form. Exarnpies oi a rendering system rrsay be a comparer system, a digstai aitofs 
system, or a primer. A rendering system has ibe same security features as a repository The coupfing ot a fenoebng 
repository -with the rendering Pevsee may occur trs a rnanner eassahls for the type ot rendering device. 

*s figure 4a iifustrrstss a printer as an exampie of s rsrwemg system. Rererrtne- ;o Prgurss & pmlur eysierri 40 1 nee 
contained therein a printer repository -102 and a pan; devtce *33 it should de noted that the the dashed tine defining 
printer system 401 det:nes a secure system boundary Cornmunfcrsttsns wlshm the boundary are asssrsied to be secu re. 
Dapendmg on ids secufliy tevsi. the boiinean/ aiao raprssenis a barrier (ntsmfed to provide physicai inregnsy The 
printer repository 402 is an instantiation ot tne rendering reposs-ory 205 oi Ftp re 2. The primer repository 402 wtii in 

se some inssances contain an ephemeral copy ot a digtfal work which remains antii rt -s printed oui by toe print angina 
403. fn otbsf instances, rne primer repositoiv 402 may contain digital works seen as fonts, which wifs remain and ean 
de sjified based on use TTsrs design assures inset ail cawfMtsalion itnes bebvsvsn printers and pwtonq devices ars 
encrypted, anises ihey are wiihin a p:hys;c;it!y secrse bosfidary. This rtessan ieaiure eisTiirifStee rs.posentirsi iauif point 
trrroijgh ivdisb the digitaf work coeid be impropariy obtained Tne printer cievica 403 repressnfs tne printer components 

•S3 ased so create the printed output. 

Aiso iiiustrmed in Figsre 4s is the repository 404 The repository 404 is coupied to the printer repository 402. The 
rseesrowy 404 represents an extsmai repository which contains drpitsi ivorks. 

Fsgure 46 is an sxansple ot a oompatei system as a rsndsone- system. A computer system may constitute a hmeito 



4 



EP071SM4A1 



function"' device since a my execute digits: woft® te g. solans program? and disptay digital works (0.9= « digrtatsd 
photographs. Logically each fer«ferifi§ device cm be viewed as having its own feposjiofy, alshc-ooji onty cm physical 
repository is fssecssd Refsrong to Rgurs 4b. a ccropyter system 41 Q has contained therein a arspfety/exscutscn f3po&- 
ttofy 4 1 1 The display/execution repository 4 5 i is eoupisd to display device. 4 i £ ma execution devscs 4 5 3. The dashed 
•s feox staToendlng the computer system; 4)0 repiessms a ssoifisy boundary w$tm which oarm mjnieatioos am assumed 
fes ne secure. TJ*i3 disp&y/ex&suifen reps»if»?y 411 is fuitn*^ «o«pfe« K> a e.f<*«it sewer 414 to repot; any tees So bo 
bfitsd tor access to a digital work and a depository 415 for asxeesnrsg digital wofks stored therein. 

Usage fights are attached dtrecfiy to dHjifat wosks Tdas., si ts ropoftani to understand the sttucture of a rJgitas* work. 
T be str eeiure ©t s digitai work, in particusar cosnposiss digital works, may bo rtatumtty organ^ec soro so acyclic sfruouts 
suet} as a {warcfty. For example, a magazine bm varices artistes and photographs which may have been created 
and turn owed by different persons. Each ol She articles smi photographs may represent a node m a his?amhic«i 
w structure Consequently, cootrois. i.e. usage nobis, may be placed on each nods by the creator. By enabling control 
and fee olliing to be associated with each node, a creator of a work can be assured That the rights and lass are riot 
circumvented 

Sn trie currently preterms ernoodirnem. the tile intorrnaiion -or a digits! »ork is divided into JWQ: files: a "contents* 
We end a "description tree' 1 hie. From the parsssctsve of a repository, the "contents* hie is a sttmm of addressable 
byfes whose torniaf depends ecmpiotoly on the interpreter used So ptey dssptay or print the osgitat work Tne bescription 
tree tits makes it possible to examine the ngnts and tees tor a work without reference to the com em ot the digital work, 
H shoukJ be rsoied thai the terns description tree as used herein sefers to any type of acyclic structure used to iepseseat 
tne relationship between !ho varios.:s cornponents of a digjsai wo;k 

Figure S liiustratss the iayect of a contents file Reterring to Figure S. a digital work is comprised ot story A 310. 
advertisement sit. stoty B 512 aoet etoty C 513. it t& assumed ttjet she dsgitai work b stored s;art!ng at a retative 
aderess ot 0. escn o- the parts ot the digttai work are stored Smesriy so that: story A 510 is stored at approximate^- 
add:es;.-sJS O-SO.OOO. adveniserncnt 511 f* addresses 30 005-40 000. siory B 552 st addresses 40 00! -SO. 000 and 
story C SIS at addresses 60,001 -S5K Tha datait ot story A 5t0 is itttistrated in Ficiora 0 Bstsrw-g to Hqura S. »;e 
story A 510 b fermer broken down so show tsxt 6t4 stored si address 0-1500. eoidior phoio 615 at addresses 
s>? 3 50 3 -10.000. graphics 6 3 6 stored at address** 10.00 ; -2S.0OO aad Sidebar 61 7 staed address 26.001 -r30.000 Nois 
thai the mm «i ihe contents iiie n-ay be eorripireseeo {tor savsno storage) or snstyptsd {for security) 

Ffom Figures 5 arsd 6 it ts rsadiiy observed that s digital work cari fee represented by its component parts as a 
hierarchy. The deseripiioi) tree for a titgm wotk is corirprisad of a sat of reiaied descrrpior bio;:ks id-bieckst. Tne 
oonroriis ot e?icn d -block is dasonbed vdth respect ro F tgere 7 R«tet'r,np, to Ftijrire 7 . a d-btocs 700 ioo-ndes an xjmMw 
3S 70 1 vshicn is a unsgoe identsiier tor trie work in the repository, a starting address 702 providing the start address ot the 
first byts of she work, a tength 703 gwtng the narTtber ot bytes in the work, a sights portior? 704 wherein the gransed 
ysage ngnts and their status data are maintained, a parent pointer 70S tor pointing to a parent d-bioek and cPiid pointers 
706 tor pointing to the chiid d-fetocks. in the crsrsntiy piefsrred sf;^x>:jin-is;;t ibe sisnUfisr 701 has two pals. The first 
pap sb a aniqae rsamber assienrst ii) the repository t;pon marrefaeiera. Tne s«5Sorsd part ts a urrir^ee nurneer assigned 
•so to the vsorit ripon orealson. Tno rights portion 704 Witt contain a dais structure, such as a fook-tip tahie. vvheresri the 
various intoarsation associated with a ri^ht is maintained, 't'ne ipforrnation rsgeired by the respects a sage rights is 
described in rnore dsiais beicw. D-t;iocks forrn a sinet tsierarehy The toe d-istock ot a work has m parent, at! ottrer d- 
feiocks have one parent. The relationship ot esape rights ostween parent and cnlld d-^ioeks ana how conflicts are 
resoivsd is described betow 

A speciai type of d-otock is a s sheii x d-biock. A shots d -block adds no naw content beyond the eonf snS of its parts 
A shei; d-bSoek ts used to add nghts and fee information, iypicatty oy disiridnsors of digifai works. 

Figure B iitssirafas a dssenption tree ior fis digital work o! Figure 5. Referring to Figure B : a top d-btock 820 for 
the digifai: work points to fhs various stories and advertefin-ienis eontasned therein Hero, ihe tap d-foioaS20 points io 
d-bbekast frepreser-rtipg story AS)0}; d-block822 syepreseriiifrg: the adverhsernent 511}, d-biock B23 {represerifing 
SSS story 8-512) and and si-htoc-k S24 {repreaerttir-g stojy C 51 3). 

The portion ot the description tree for Story A 510 is issListrafsd In Figure a D-block 02S represents text 614. d- 
feiock 926 repiessiits photo 61 5, d-biock S2? represents graphics 816 by and d-bsock 928 represents sidebar si 7, 

The rights portion 704 of a descriptor block isiurttisr iiiusimSijd in figure 10. Figure 10 iiiusirairss a structure which 
is repeated In the rights portion 704 for each right. Referring to Figure '!0 : each right: will have a right code field 1050 
and states formation held 1052. The fight cods sieid 1050 v»i contain a urilque cods assigrsed to a right. Tfie status 
inforiTiatior-i fiieid 1052. wiii contain infermatlaa resafing to the oSaio of a right and the digital work. Such information Is 
indicated below in Table 1, The rights as stored in the rights portion 7tX may typically be In numerical order based on 
the tight code. 
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TA8L.E 1 









j \: S-V'-vHiV .i.r: : ";:.: 




Property 






! i«« 




Coeies-lo-lJso 




A counter of the number c 


* copies o! a work the 1 


are in uss. incremented when 






another copy ss used, dsc 


rsnmntad whan use i : 


s COmpiOiSd. 




Tims- Units 


indicate* e* 8te maximum 

OUi 


rsasnfeer 0? iiroe-ynsts ' 


ha; a docureeni can be to&MG 


Loans r-Copy 


Booieas! 


Indicator that the current > 


vofk is a Soansci out eo 


ov oi sir; aaiborKaci digsiai wor.k. 


i^raatnirsg-Tifne 


Time -Units 


Indicator at She seraasniag 


time of use on a matt 


srsd cjocaroent nght. 




Siring 


A string containing various 


> idi&ftiiiysng mSdmtaftc 


i about & drjeatTsent. The execs 






torsyrat oi this is no; spscfi 


od. but « car; snokdo i 


lionTiaiiOr: such as a puOilSher 






name. minot msm. sS8f> 


3 number encs m on. 




Rovonus^Dwhor 


RO- Poser 


A haadio scisrasfying a revs 
usage Sees. 


n«e owner sor a 


work 'Hi's is used tor repofSino, 


Hisiofy-llst 


QsSs-Dessr 
Hlstory-Rec 


The date !ha: ihe distal v> 

A iist of events recording 
transfer, backup, « smio< 


ork was psobtrshod. 

he repostones ana d; 
e a digital work 




tfes for operaisons ih?;; copy 



The approach for repseseof :rig digiai wotKs by separating description dais {sorts content assutrias shat pasts of a 
tiiaareconirguoashui iaks-snoposi;lonon;haae!t.ia! roprsssentstriiooot consent sn pasticuiar is se neutral to the- question 
of whsthsr corstent repressniatfcsr. fmf take an obiec; orionied approach it wowkl foe matur*.! to represent sortoit as 
obiecis. in princspis. ii snav be oortvsoler;; to have coritss-ri objects that Inciude the bitSng structure and sights Infosmahon 
thai is mprsssrttesi m ihe £>bl«»te Such vsrsaiont; si's she design ot the i'sprssssiitaison are oossiteia and art; vs&bls 
aiios'aatsv&s but nt&y iatsoduce processing overiiead. e.g. the irsiafprotaiion o! ihe objects 

Oigiia) limbs a;e siorad in a repository as part ot a hte;arch:cai Siia sysiasn. Foktera {aiso tesrrtad directos^es and 
5L!b'OifSo?orios; emm the digite; wonxs as weii as other toitfefs. Osgiiai wot ss mi loi6m$ in a iokfcf ars Ofderoa in 
aipf?ab;ji!ca) aide;. The d:gsiai worKs are typed to rsiiect how ihe liias are used. Usaga r*gt;is car; be attached t<; foidess 
so thai thss testier :;seit is \rmim a;s a digitssi work. Access to ihs ;s>idar woufcf thoj-! bs handiad in Sbe sarrns iashsc« as 
an> f other digitai work As m be cirssoribsd in more d<siasf bsiow. the contents oi' ihe iosderase syfojeci io their own rights. 
Moreover iiie rsjenasjWsBrit oghta rrsay be aSaohed to the fosde; vsi>rcr; defioe how tdder sx»>tents can bs rrjanaged. 

.MTofiMMG USAGE RiG HTS TO, A pjGiTAL, WOB?^ 

i; is it.:ndaraontas so thss presan; invsrif ion snat sna tissssge r^bis at;s treated as pssh o;' thss dsg;t;si work. As ihe diotiai 
work se disiribtJfed, ihe scope ot the grem-ed usage rights vsiff nsmalo ihe same or may be narrowed. For §x«rop!S, vvhen 
a digital work is isarssiarted from a <toe»m@Pt srsrver to a reposriosy; ttsa usage rigitis rnsjy stioieda the rspht 10 tcssn a 
copy tors o'edetermined parted oi tirne (caised Sbo orsrjina! rigbisj. VV^hon She roposiiory ioaas oa; a copy os ihe riwjiisi 
work, ths usage nghts in the sossaer copy tested the next ss? of nobisi could be est to prohibit any further rights to loan 
ou; ttsa copy. Thss basis; idea js tfsat ooe cansios grarst eiote rlghta than fbay bavss. 

Tno attachrnent ot usage rights soio a dsgsiai work tmy ooaur in s variety oi wssys if tho usage rights m he ihe 
same tor an entirs digital wo;K. they couid bs aiiached mm the digits; work Is processed tor depossi ;n the digitai work 
sarver. in the casss o! a dsgiiai work having ditiaf rssft usage ngsits for ino yencsjs oompoesnts. this o;ss> bs csone as thss 
dtgliai work t* ooing cheated . Maoihoong tool or digsta! work asserabiing tool eoaid be iJiixed which pm®&- ior m 
eutarsated fsxscess of ssttaohsng ihe ijsaqs rights. 

As wiii oo described bsiow. whan a cisgsuii «erk is copied. ;rarisiefred or iosmed e 'mxv. ser of rights* can be 
sptsoitied, 'i'hs'neki sst ot rights* will ha attached to iho dibits; work as It ss tansporsssd. 

i?«8«Mj§ Cmmtiag Bighis 

Socasjsa each part tii a oiigftr-l work may havsj itstM Sisage rights, ibero will bo irsssiarioos vjJisre ihe rights oi a 
"contaloocs par;' are different irom ifs parent or container part. As. a iostsii. oorifilcf rules nsus: be esiabilshed to dictate 
wttsii and how a right may bo aserclssd. The hierarchlca! struoture of a digrsai work facilliatss tita enforcassant of such 
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miss, A "strict" ruis would 6s as foitowp: a right tor a pars In a digiiai work is sanctioned if m6 only si is & sancitortes 
for \m pars, for soee&tar d-bioeks cftfilwifig tfss pars and for at! cfeseenctent d-fefecks By sanctioned, if is meant 'that 
{1 } each of the respective parts must nave the right, and (23 any ocndiiions for exercising the right are seiss? ad 
it also possibfe to impiement the present kmrtim using a mors tenient rule, }« the more ienieni wfe, access to 
* the part may he enables to the descendant pests- wtsich have ttss right: Put aeaess is denied to She dosearrdenss which 
do not. 

An example oi applying doth She- strict rate end ieniont ss stlustrataiS wr#t ie'ersnce to Figure It . Referring So Figure 
11. a root d-btoek 1101 has chad d-fciocks 1102-1105 in this <m&. foot fJ-fefeck represents a magazine, arid eiseh of 
the chiis d-bioeks t 1 02-1! 05 represent articiss rr> the magawis. Suppose thai a request is made to pmm the dig-iai 
?e work represented by toot d-tsiock 1105 Ysbsrw. the strict ryie :s followed The aphis for the root d-atock 1101 and child 
d-blocks nQS-HOS&fB thsn snesmteed. Bootd-blcsek 1101 andchiidd-cteks 11 08 and 11 OS haves bean granted PRINT 
ngpfs Chi-d b-siock it OS has not been grmm PRiNT ngpfs snd chssd d-efock11G4 has PBJNT rscshrs oonditkwadon 
payment of a usages tee. 

Under i«e sinei ruse the PR5NT right cannot be expressed heesrr-seths ohiW d-biock doss not haws the PRt&T ngnf 
« Undst the teroem rule, the raseii vvoufe be dlfseron!. The digW works represented by chiid d-biochs 1102 and ■ :QS 
could Pe printed and the dlpiiai work represented by d-Pi'osk 1104 conid he printed so long as the usage lee is paid. 
Only the digital work t epr ssented by d-bfock 1 1 03 eourrf not m grinls-d. Tnts ssms rmM wourd be atxornptishsti under 
the strret ruse it m requests » direered so each of tha mows&at dtpjiai works. 

The present invention supports venous canr&kBiifans oi aiiowmg and sSmttowtg asscess. Moreover as wiii bo 
tts deser iped bsiow. ths usage ngm $?mwrM per rDits the <nmw of a sio;riai work to specify if constraints may be imposed 
on the work py a <smamt Part. The manner ^ ws-sich Otpsai vwks may be sanctioned Pecause of usage fiphrs confiiCis 
wouki be i-Tiplemsritefioi - : specike ai5d wonib depsrid m tha rww& of ?ha dspjfSal works. 

REPOSSTORIES 

in i:ha description of Pi^ure S. t was indrcststi thai rsposiioriss eeme in venous fenns Aii reposiioriss provide a 
core set of services tor ths tren jm:ss:on of orgjiet wotks 'i'he rnaerior ia which <iig\Wi works ere exchanges rs itn basis 
for aii iiansaebon baiwisea iepossioiiss Tha various repository types hitler in trts ethrrBta Innsiions thai they aerfora}. 
RspC'Sitorsss may be devscas ibemseives. or snev may be incorporates into other systems. An sxampie ss the rersdsring 

sp repository 203 of Figure 2. 

A repository wit- nave associated with it a repository ideniifiOi: Typirssiiy. the repository idenisiser woeid he a aniqao 
nember assigned to rho repository at she hrae of manufacture. Each rsposPory wiii aiso bo ciessified as Pe:np so a 
paaieniaf aacnnsy class: Coriaii? oomnieaisaisoas ai?d trarisacSbns n>ay tsa oondiiionad on a -eposiioiy hestg in a 
particaiar saenrsry ciass. Tha various sscuoty eiassas are oaseribed in praaier dafati beiow: 

-is As a pferoqaisite to operation, a repository wiii reqyirs possession of an ideniifieatsoa certificate ioentif scat ion 
certificates are encrypted to prevent forgery and are issued by a Easier reeosstofy. A {raster reposiiory piays She roie 
oi an aefhoriiaiion agoni to enabie repositoffes to receive diqjtei works, ideotifioaiion eeriiticaios must be updated en 
a pedooV. Pns:s. idej;>iiicatto;i cett:f«atss a;e desciibed sn greaier oatai! Peiow yn$\ respect So tfis repieSi'ation trans- 
act ion. 

•so A repository nas bosn a hardware and tuncttonat emhooiniens. 'i'ne fanctionai embodsmeai is t/ptcaity soitware 
exeouting on She harbware embodtrwat Aiternaiiveiy. the iunetionai embodimeas may be omPeddob sa ?he !»d«8 
ssntsodifftsnt ssjch as at; Appi:caS;on Sprjoiiic :r;;egiatad Girctiir {ASIC} cbsp 

The hardware ernbotiifoens oi a repository wiSi be snciossd <n a secure tiousiup which it comprontised, may cause 
the repository So Ps disabled. The basse componen-s of ibe hardware eiribodiment oi a ieposstoiy are described wish 

*s reiaieoce toFigsiio 12 Referring So Figure s2. a repository «s coniprirsed ot a processing means tah'X aiorrirje system 
t20V. cioctv taOSand externa: mtenace t206 "the processing means igop :s ccmpiised of a processor eisreon; 1201 
ar;d processor rasrrsoiy 1202. The prooesssrsg riiaans 1201 provides coniroiiar. reposiiory tfansaoisori and esnge ngr;!s 
Sraasrsetion taaciions tor the repository varfoas fuacf :ona rn the operation of the fepossrory sneh m decryption isnd/or 
decompfess:on of digrsai wor - ks and transac-ion messages ase aiso petforinsd by the processing trmm 1200. The 

5P paxessor eierrrent t SOS may sse a. microprocessor or tMhsr suirrsbia compaSing oorTiprjnent The processof mernory 
1 202 *ouk$ iypicaiiy be tottiw comprisea of ReadOniy Memories rROtvt; and Random Access Me:-nortes fRAM} Such 
meniories eroeld eonrsiri riie sottware iastrardioas ntiir^ad by ihe processor Siemens 1201 sn performing the functions 
of the repository. 

Tne storage system 1207 is todhereoasorisedot ossenpror storage ;20S and coi^tem storage 1 £04. Thsdeseription 
tree storage 1 203 w;h store itje description tree for the drpjtsi work, a?id the consent sfomgo vsiii store the associated 
coaient.. Tha dssenphon use storage ] 203 and conreni ssorape 1 204 need noi be ot the sense type erf storage medium, 
nor are they nseassariiy on ins same physteai device. So for example, ids descriptor storage t203 may be stored on 
a soiid :s5aie storage ffor' rapid ietaevat ol the description tree information), wtirie tt?e content siofaae -204 msy be on 
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a hi* capacity storage sych as an ootieai disk. 

The stock i 205 is usees io ttm&-ssar«p vmsm \im based condtiions for usage fights or lor motoring usa§« Seas 
vsrwch sway so assessed w8h .ths- digital woms. The cfoc* 12Q& wis nave sn umrttemjj&t&te power syppiy. «g. a 
battery. In order t© maintain jhe integrity of tha ilme-srsrnps, s "he sxtsfaai interface mm® t SOS provides for toe signal 
•5 connection io oiher repositories arsd to a credit ssiver. The externa! trsmrface moans 1806 provides for the exchange 
«t signais via feted standard irsterfaciss such as RS -232 or Persons: Computer MsanuSsetwrsr* Card f ndustry Assentation 
{ PC MClAj smrcfeNfe. or FDD!. The mttmal imtmts mmm \20B may also provide nafwork cmmAwm 

The functional amrxidtrneni or a repository ss described wsth reference io Figure -3. Refarrmg io .Figure tS. she 
tonetionai smbodimem is comprised or' an opetatsnQ. system tact core repository services 1303. usaqe trswtsacisoft 
f« handsets 1 303. repository specific inactions. 1 304 and a user Intedaca 1 305 The operating system 1 301 is specific 
fo ttts repository and wouid iypicaiiy depend on Jhe type oi pnocsssot being ysed. Ttse operating system 1301 wouki 
aiso provide tne baste services for ewtfsoiimg and interfacing satween tiia basse components ot the repository. 

The core repository sasvses 1302 comprises a set oi functions tsqulred by ssstch and svsry repository The core 
repository services 1302 inciuds ths session initiation transactions wtiien are defined io greafet deiaii berow. This sst 
« of servscss also snefcoes a oeoenc trchet agent which is used io "punctv a digiiar ticket and & generic swthorsraiiors 
server lor processing aurhoilxetion speciiicsiions. Dipjial tickers and auihe-i sessions at® spew's tnechatwnslor con- 
irc-iting this distribution and use or dsgiiai works and are described In snore deiaii beiov.r Mote that couoieo to tfts core 
repository services am a plurality or identification oertiiicafas 1306. Th« identification certificates 1308 are r§qyifs<1 to 
orrabie rho rrsa oi tfrr; rspoariosy 

The isaea riransaeirons haadrai's 1 303 sjompfss© f'-tnerionarriy t<st proeosssrip access repuesis to digits: works and 
for Psliing less basso on accoss. Tho asa^e srsinsraettons srjp&ortad: wsii bs driterem tor aaoh rspoaltory !yps. For ax- 
ariipia, I; may mi be naeessary ior soros rsposisonas io iss'sdls accrsss raqussts for dlpiiaS works. 

Tho ropository spsciisn ianoiiooaiity 1304 coasposas Janciioaaisty that is unrqrra to a repository For exampia. tna 
masior rsposiiory has specrai iunchonaiib/ ior issuing ciiplta! ccrlltlcarss a ndrriai n$ain lag e nary prion keys. The raposltory 
spaosito tufKixirrairiy 1 304 vsjuid Irwiuda tho user tniarfaco (mpiariisniaiion Jot !he repository. 

for soma cirgrrai works ids icssss caused by any rndsviditai instance oi unauihor izae sopyrap ts insignificant and 
s>? ihe ohloS economic ewesm ifes In assunno 'hs convenlenco oi access arsd iow<jvsms%ci hilliarj. m such casea. simpia 
and snexponsiva haadheiri rspos;ior ias and nssfvsof k-foassd svorkstarlons may be suiiafe repostiohos. ovan tnoygh ths 
rrm&yfes and' guarrsnreas oi sec c my are modest. 

At ihe oitJsr a«dame ; same diqltai work;; each as a dlgiiai copy of a irrsi ran tmm of a dsarsr boad or stock 
oarhiscafs. wocid oe of very hsgP vaiae so tnai it ;s pradaar to empioy saaiion and iashy er<ibora1e socarify msasaras ;o 
;k anscm tnat ihey are not copied or forged', A tesosatsy scsiadla for noidihg such a orgtoi work couici nave siaoorare 
maasures lot easyritrp physics;: truagnry m<i for vsrttyytg aeShoaxshon before use. 



By arrangrno a universal protocoS, aii kinds of raposiiones can commrjaicaio with each oiner rn prmcipip. however 
er«a;o;« a: sotna works will warst to spscsiy ii"sai rheii works ortiy tro irairsteired to reposfio? :ss whose i&vei oi seeeiliy 
is high enorjgf:. For tt?>s raas«s i ctaxnsnt raposltofies have a ranking system for' ciaasss and iaveis of security. Tno 



40 


security c;« 


sssas in the currently pfststfeo - ombodrrnsnf ara dssondsd in Tabie 2 

TA8L6 £ 




REPOSITORY SECURITY LEVELS 


4$ 


Levei 


Doscriptio;'! oi Security 


;'£i 


0 


Open system. Doc:.imanS transmission ts unencrypted. No tftgrta* cehtttcata :s reqc rrao for screntiticafson . 
Tho sacut:iy of idc systatfs depends mostly on jsos honesty since oniy nuxiost knowiedga rnny bs rrtjeded 
to etrsurwen) ias mutty measures. The repository has no provisions for prsvsnting unamhorteed 
proprarnstroni rynnsnpand acoesssrsgorcopylnghias. Tha s-ystsm does not pravant the use ot rerr^vabts 
storage and does trot encrypt stored Mas. 




1 


Mtntrrs&i saenrrty. Lite ths pravrocs class sxcspt thstt stored frias ara mlnintally enatyptsd. sndading onas 
on reinovabia storage. 




s 


Base sscatlry. L.ska the previous class oxcapt rhat special fools and hnowisdge ara required to 
compromise ;ne ptogiamrninp. ths contents of the repository, or ths stais ot the dock. Aii digital 
sorainyriicationssraPncryptad. Adipitaiashstrcaie » provided ^sidantsiicsiion. fvladrum lava! encryption 
:s iisaa. Repository kianriiication number ts uniorgeabie. 
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TABLE 2 (continued) 





mPO&VCm SECURITY LEVELS 




Levei 


Descdpiiors of Secaniy 


a 


3 


General security. Ufcetheoreviouss class pktsti^fsqtJlfs^nsof spscis'jc^i&afsns^rftocornsfcwiss 
8)3 physical Integrity of the repository and thai modes; secn/p-ion is used on all tfarssrriissions. Passwxd 
protection is required jo uso ths focal user icssrtase The digital dock system cannot be roses wiinout 
authorisation. Ho vvoiks <m<M bs stood on fsrrsov&ric storage When executing works ss piogrsum it 
f««& tfiew in tbesr ova; address space arid does not gsve them direct access :o smy iiie storage or other 
memory con-inntcg system eotSe or works rhey can access works ooiy ifircugn ths transmission 
transaction protoco;. 


rs 


4 


iJke She previous class except that Ssioh level sncryoLoc is used or; aii comrosnicatlons Sensors are 
ased to record attercpis si physscai arsd electronic tampering. After sech taropefirtcj, ;ne repository vvsSS 
not perform other trarisactions umH is has feporretf such tampering tos designated server. 


SO 


5 


Like the orevSoas class except itm ff tfte onysteal or ciigii/a! ariompts a! tampering exceed soma preset 
•hrsshoid the! threaten ths physical integrity of She repository or ins integrity oi dSoMi anc- cryptographic 
earners, ;han Sti&rapoasiotyvvltiaaveoiiSydocuniijntdescripiionrsKsrdsof history butwft erase or destroy 
any diglsai identifiers that could be misused if ref eased to m ;mscrcpu;rcs.;s parsy » aiso modifies any 
certificates of authenticity to indicate that the physic?)! systam has bean compromised, it aiso erases the 
contents of designated documents. 




6 


Lik<5thssprevios.:sciSiessxcepftfK5tth8 repository wiltaliorripf wireless communication to repost tampering 
sod will employ nosey alarms. 


ss 


10 


This would correspond so a very high leval of security This server would maintain constant 
eomroenioalions So remote security systems reporting transactions; sensor readings, and attempts to 
orceoivens security. 



Si ., 'i'nc c.h8f«cteri?at!on ot tecurfy Sevete described in lanle 2 is not intended" to he ted Ucxd irr^xfrtant <s in« :dsa 
o! hsvflng diliei'snt aacorsly ievoia for diff erant rspoasSortas. It ;s anlivspaisd fet fisw secynty classes and fsqussernsnta 
will ovo-vs rtseesrdsnjj: Is soesai siiusiione and enfisopas in f schnolopy; 

A usof mistime is DrosdV astmad ssa me mschanisirs by wnich a rrsss intasacta mn a rspsiiiory m order so sovokc 
Si»fiSi3s6t(oos to fgftj access to a digital work, or sxoroise osege nqtm As desendeo' above : « j-eposttosy may Sse em- 
bodioo sn various torros. Tps yser inisrtacs for e rrsposiiory will diffsr depsndiiir; on sns pas-Jisuisr es^oodi^eht Th§ 
uaar tettacs rnsay ds a graphical user ::i!srface having toons sepsesanisng the digila! vvorka at»S the various awisactioiis 
rt that may m osrformso. Ths user iossrtaco m»y bo a paooresoci dsaiog In vfcm a user is pfcmpioo for inftjfmeiion. 

Ths iJssr snterlaco asalt need not be part of the repository As a rspo&itory may so embsddsd In some othsr device, 
ths osa; Intaifssas may ifistseiy bs a past of the device in which the repository :s aicbadded. For axairspls, the raposrSa;y 
coijict Po embedded in a "casd* tha! is insasted into ac avafiadie stoS in aeomp-iis! system The ssset interiace rcey be 
a eornbinatiort ot a display keybosrd. cursor cortr-oS device aod sofiwars sxsscutsog oo the compntssr syslsm. 
^ A; a min»rHjm. the user inieitase must permit a user to input i;-itos session sucn ss assess requests and aipbs 

numeric csata end provtos isedbeoK as So traosaottoo status. Tb& cssr intsrlaso wiif iben oaess ths repository to ioiiiate 
ihesuiiabielfSoaactiorisioasrv-icaihe request ahartsKStsof&^tic'iiiaruse^ 
tha! a repostay will ptevde. 

In the pro-sent invention, fees may be assoctafed wish ths sxetoise of a right. Ths fequirsmeni tor pssyment ot Sees 
is described with each veisior; oi a ijsage rsgi;i st the usage ■ igh-s Sijngoege. The iccoidiris; and reporthg of soch lees 
Is perfermed by She crodi; server. One of the capabiilttes aoahlsd by associating fees with nghis is ihe possibilliy o! 
^ supposting a «0e range of ehorgiog mooeis. The slmpisst model, ussd by coiivsntional sottwsrs : is that there fe s 
slsigie see at \m time of putehsse. after which she pershaser obtains oriiin-iited r^ghss to use she work as ofssn and for 
as long as hs or she wants. Alternative oncosis, include meSsrsd ess and voriabis ices . A single work can have differ eoi 
fees for different oess. Foi example, vowing a .photograph «^ a dlspiay cooid have drrte sent fees than making a lietdeopy 
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of mduatng it w s newty creates work. A key jo those altemativss charging rmsssis Is to have «.fow overhead means 
asiabftshlna, fees and accotinffng lot srsds! <ja these transactions. 
A erode server is a cwneaiatfonai system thai reiraeiy autnoriites and rseo?«s't!ies© fransaoiions so thai less am 
btited and oasd. The credit server reports teas to a beting clearinghouse. The biiiing ciesrlnghouse manages the tsnanclai 
•5 transactions as !hay occur As a result, bite may Ds cjsner&ted and accounts reconciled Pratarabiy She cf edit server 
wouid store ina fee transactions and oehodleaiiy «*w.un«»te vis a nstvwys wrfsh the tmissi} otearino.houss tor recon- 
ciliation, in such art err&odanerst. wnrrtunscattas with the bitting eieahnghouss wouid be encrypted for integrity and 
security reasons, in another emoocsfmem. the creest server acts as a "debt; card" where transactions occur in "asai- 
time* agains; a user account 

?c A credit seivs: t& cornpnsed of memory, a processing mean*, a clock, and interlace means for coupling to a re- 

pository and a finance insttUifion (e g. a modem}. The credit server wift afso need so have security and authentication 
tunsiionaitiy. These elements are essentially the same eisnients as fhsss oi a repository. Tows, a siogta device cart 
be both a ieaosiiory and a credit server, provided ■hath has fhg appi^piiats processing eiemenis for carrying out the 
corresponding -Junctions and prclooois. Tyrsiaally. however, a credit server m»M ba a oard-sbted system m the pos ■ 

« session of the owner ©? ine credit. The credit ssrver is copied >o a rspo&iiofy and woufd intstfccJ via financial trans.- 
actions as described beiow interactions with &Xmn/M krmmim may occur via protocols established by the linaocisl 
i f ist itui ton s Sharnsei ves . 

in the currently preferred smfoedimeftt credit sewers associatsd with both ;na sstvsr and the rsposSory rspon: m» 
tonmmA trsnsas;! mn to the bfiis'sp ainaringhaiisc. for assrrspis, wban a rf:gfial work is copied by oan rspesitcay io arsoibar 
ttv for a fas. c»'sd>i servers coapsac to aasn of ibs raposiitorias wis (Spon ths transaction to ihe aiillng cisarinijboijaa. This 
ss o'ssifisbss In that it insarss that a jrsnsssciscsn w$ be ssjcpuriied for in ths mm of some bresK sn the cwamursicstw 
bstvseers a easdrt mtmr arsd if;s niising dsannahousa. Hawnvoa soma in^iemensatxms raay embody only a single 
credit sewer repsxtiog the transticiiors ;o rninirrsisrj irarvsactloii: piocsssing at the ass or iosing some transactbes. 



The pressn? ir;voa!io^ ysos staiemsnts in a high isvei "usage ngrns Sangeaes" io datine rights ».&saclatod wnth 
dtgliai works and their parts. Usage rlgbSa ssststmrns are (atrarpaatnd hy raposSonea sad ara asad to detain iine wf ;at 
transactfons can oa saccoastaiiy carrisd o;ii tor a <stgosi wxk and also to determine parametere tor ihose transactions 
-Si> For sxampie. sentences in the iaagusoe determins whether a owen dlghei weak can be copied, when and how it can 
be asad, and what teas hi any! are to aa anargeo for ;hat asa. Once iha iisage rights statements are goneretsd. they 
an* encoded in a eta'tsbie form for accessing danng the processing of transactions. 

Defining ijsage rights in terms of a iarsgcage m corfiisiaatloa wan the hiaiarchicai iepieaantatioa o? a dia:ta: work 
aoabiss the suppoit ot a wide variety ot distriociion ano tas schemes. An exampie •& the abrtiy io aiiaen rriaitipie 
;?s versions ot a cgi;r to a work So a creator may attach a PRif^T right -o make 6 cop:ee lor $10 00 ancf a PRINT nobs to 
mate caiifniied copies io; $1 00.06. A p-iretrases rrsay than choose wh«rr optica hast fits bss needs. Aaot!5er exempts 
ts that rignts and Sees ara additive. So in tha case of a coraposiie worn, the agnts and tees of each at tne cornpenenis 
works is used m deterfiiiinng ihe nghm arid fees fes-the work as a whole 

The aasia contents of a ngftf are riiaaiiaied it? Ftgum 14. Reternngto Figurr? 14. a right t450 tsas a !a}asar:;loi>a; 
•a> component HSt ano a spacsticaf loascorcponant 14S2 A rsgni: }4£0 has a iabel io:g. COPY or PBJftj? 5 v^ssch radicates 
the use or distflbation oriviieges tha; ate embodied by she nghh The transactional compoaeni HSf cofrespoads to a 
paaleaSar way m which a dio^at work may as used or distributed. Tha transactional cortsporsent 145t >s typicaify am- 
bobied In sottwars Instractions m a repository which smotemwsi the use or dietrlbusiors privsiegee tor the nght. The 
spso)iica;ior5s co:T;porisata 1 452 am uasd to saeesty conditions which musf bo satlssliad pi sor io she right being sxsretssd 
or to destgnaia vaiioas f«jnsaction rsfeteo paraaiatais, m tne eaaeaily pfijtarrad ambodimaah ibese specriiaanons 
snciuda copy cean! 14S3. Fees and ineaaiives t454. Time 1 45b. Access and Sseuoiy Hm and Coatroi l-W. c.ach 
of Iheae spao!iicai(o;5s w;ii bs described :n greater detasi below With ioepeci to the iar;guage g&'niw etemersss. 

Tha usa^a rrghis Isnrsijags is based on the grammar descrtbsd bakm A gtemmar :s a cr>avsaiaa; means for 
detsaiBp valid sequerscs of ayitibola for a language, to dasenbrag the grararosr site r;otat;oa "faibicf ss used to indicate 
vC drsiino! ohoicas among alternatives, in this ©xaropte. a. sentence can have eiibar an V. V or *c°. it rnest include 
oxaciiy one ot thorn, 'ins braces {} &m used to indicate opt;onai iisms. iNoie tha; brackets, bars and sraoss are uses 
to descrths the iaaguage of usage sights sentences but do no; appear m actuai se;itances m.Ste iariguape 

in contrast parenttiesas are part of the usiae-a rights iariijuage Parentheses are usee- to group items iisgottier in 
tests. The notation (x'j isased soiadicaie a variabis iangtn iiss. thpr is a tts; containing on&ormors Bern;; ottypex The 
® riotaiion Ot}- is used to Indtcaie a vauabie mincer of iraia coaiaias'ig x 

Keywords sa the giammaf are woids ioiiasiod by cotons. Keywords tiro a. common and' very speclaf case In the 
ianguage. may are often used io indicate a ssngie value, typically m identifier, in many cases, the keyword and the 
parameter are entirety optional. When a keyword ts given, it offers takes a smgie iderjiitser as its value, la some cases, 
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m Keywerd tsKes & ssss ot identifiers. 

to the usega nghis ianguage. Isms is specs^-ed m an hourstrnrnsttes seconds for nh <nm sss representation. Timo 
20t5S indicators, o.g. pot for t J ae<ne Daykghi Isms, may atsc be spoctei Osiss srs fsprssoriiscs as ysar/ month/day 
<or YVYY/MMM/OD). Note thai these time and fepresentaJkJns may spec-sty jrxjmafijs in itm§ or wfa of urne 
•s Money sitiiss m® spsc^sd in turns* of doriars. 

Ptnaify. mm* usage rights language, various th^gs" wiii need to rmeraetwsth saehoShar Porexamprs. an tns-anca 
of a usage right may spoctffy a tank iacocsurst. a digital deke sic Such things need to tie ictenfcfced and at® specified 
herein using ths suflnt MO * 

The Usage Righis Grammar us ftstsd tn <te entirety m Figure 5 6 and is described feeiov* 
» Grammar eksmsnt 1501 "D^KbI Worts Rights:* (Rights")" define the digital w tights ss. a set of ngh» fl* &s$ 

c! fights attached So a osgkai work ttetrnu how )ha; Ofojtai weak may be transferred, used. per?onr;od or prayed. A set 
oi rsghis vwss atfcseft to me entire ckgstai wxk and rn she esse of ccmpourKf digits! works, each at ths components at ths 
cSfglu* msk. The usage fights of cGtsponsrsSs of a dfgitai may be ditfetent. 

G; jfs mist eiemeni ; hOf? '■Rigm: » iRignt-Code {Copy- Count} {Contf oi- Spec} {T-rhe-Speo} (Access -Spec} 
« {Rse-Spe*})* enumsratss. the content of a right. Each usage r:ght mm spec8y a dghf code Each right r%jf si&o 
optionally specify conditions which must b« satisfied tasks® ihe right can be exercised These conditions are copy 
coum. ocsofrot. iwrss. access arid tm conditions e» ths current?? preferred embedment, for jh« optional eSereeni.s. she 
toiiosviog dstsyf-s apply copy colic- oquals 1. no nrne limit on the use of the ngns, no access tests or s sc-centy Sews; 
requited to use the ngns. sod no 'fee requited These conditions wtft each bo described io gteaier detai: eeiow 

it is isiiporiant so oots ihst a dp/M work may nave muaipi» versions of a nghl sacn r^viVtg ;hs same ngrst cods. 
Trie rruiftiote version would provscfe sitsmaiive condiitoos and fess for aenssstng tha digital work. 

Sfowras c-!{.»«w» 1 50." "Right-Code . * ^def-CcHte i Transport-Code i Fi!e-iVten3gemi»»-C<3«'«fi Derivaiiva- 
Works- Crxte ConnsufMk>n«Cod«»' > distogusshes sach of the sp«K<?fc. fights ir-;oa partsenfar fight type ;aiihoLjq:h saoh 
tsgi-" :s sdcniifisa by ciisunci fight ccxiei} in ihrs way the granvnar provides & oat&iog ot possi&ia rights ihtd cart be 
assfKtaifid wah parte oi dsgitai w'fsrks. rri tf;e fciifswiria, rights are d:vded snto categorses for sonvsoienes in desnrfoing 
thscn. 

•'>-«<«**,! w!u-v ; «n; "R«rii.tet-Ct?ds> ; * (Plav.{S»iay«r:f^sy«-iO}! t»rmi: PtMe?: Prfnte;-;D}j -: ifits a c.«s- 
goty oi rights ait itwoiviag th«'tml«Rgd ^erfBrsi. transtioiy ot non-digsias eeptse of she dsgtiai work. A!ts; use the 
copsss are srassd. 

$%> 

* Pioy A procsss of tendering or performing a digstai work on sonje processor Thss incit;;ios such things as 
piaysng digiiaf trmm. pfaying digstaf music, ptaysng a video gams, running si computef giograrn. or displaying a 
dooufoeni en a display. 

* Font To t&wsr \m work :n a medium inat ss not formor prosoctsd by usags ngnts. suoh as pr;n)!tig on paper 

a«iff««<!f aioroan- tSC-5 <> Tfaflspoft-Cod« . ^(Copy i Transfer ! Uoan (R«mainifsg-Right»: •Nejct-SeJ-of-ftfshJa}! 
{(N*x{.Copy-«ighf*: ftext-Set of Bights}) 1 -' i««s s caisgosy of tighis invoiv:rig the m&ktvxjot gsreisisnt. usabis copies 
of the dlgitaf work on oittar rspostionss Tho ^isonai hJOjfh Copy- Rights dsiartas-.s ihs rights on the «o:k aites j! is 
iswispoffod. if this (s noi spseiiiijo. tnon \m ngnts on fns iiar-spofiod copy ate the saroe as <m iho fsngifiai. Ths opt!i>i>s; 
-*o Roma:n<ng-R:ghls spsoity ins rsghis tha! rsmssn with a tfigM «crk wnnn i! ;s icxsneo m. if 1h» is no! specifiso. iheo 
ihs dsiauii la that no rights can be sxercssed when if :s ioanad out. 

* Copy ivtaks s nsw copy of a work 

* Transfer Moving a werk !;o;n am repository ;o atrothsr. 

* t.ean Tsmpotaniy ioaning a e;jpy ;o another repository lot a r^sositisd onnod oi trtno. 

Cira^-n-a; eisrtion; iSOo TiiVMafragenjens-Codff: « Backup t8acfs-Uf?-Copy-Rights; Next-Set -oi Rights}! 
Rsstere ■ Ddoti; i Fotfior i Difossory {Nsi-n&rHide-t.scei : Hirfo - ««mote}{Pftrt&:H:do-!.o*aJ ; Hids-Ro^or :;n? 
a eaiagoty o? nghis invoivtng ops rtiii sons tot fsio fiBnatjerftani. saoh as !hs taaking of hsekup oopsos !o protect the copy 
vi5 ownar apaifts) cattistrophtc aquipreerrt tatirjre. 

Many sofhtvare iioonses ehdsrisooopyripht iawgivoaeopyownsr ■hsrrgnttomaks ^backup copiss to presses aga Inst 
catast;>jpi>!C faiinra of equips'nent However; fh§ n^aking of uneonitoiiod backup oopi&s ® inhofsniiy at odes wsth the 
abrlrSy to corttrot usage. sifj;;o an unconsrettsd backup copy cat} be ksps atid then rssrofed even afiar too auttoK&st 
copy was soia 

t'hs FsSe rr tanagsrfient r ights stsabie m* n?ak:ng ans f ssisr ing o? backup copies sn ss way xm\ i esposts usage r rghts, 
honoring toe teqainsrnents oi ooth she copy owner find the rights grantor find revenue owner. Sijekftp copies of work 
cfssoriprlons tinciyding rssags right* and !«« datas can bo ssot eodsr appropri&is protocoi sod usage rights centre! t:o 
other' donirntsivs toposifefrss of sntiiC:S(iiiy high security. Fvrther rsghis eermR organi;taiton ot dsgrtai wotks tnto toiders 
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whisn ihscnssfea ar# treated ss digits' works «jr,d wtoss copteois may he 'htefcfen* from a p&ny seeking to de-ermine 
the e»tso&-d repository. 

* Backup so msks a. backup copy of a diglisi work as protection aosenst media failure. 
•5 ♦ Rssfora To rssioro a backup copy of a cisgiiai wetfe. 

* Dekste To stetea or erase a copy of a dts$al work 

* Folder To cioaie and mams lofcters, sr<d to move }s!e& and foidsis osivsosfi fckters 

* Oirsctory To hide a foids-f or sis corsteros. 

?c G ,-anm rar efemeot 1 507 "Deri vsttes-Wot ks-Gode; pxiraet I Embad I Edit {Process; Pf «cess-SD|J {Nsxt-Copyv 

Rights : Next-Sei-of Rights}* iists-8 category of rigb-;> involving She ass of a digital work to create new works. 

* Extrae- To rsfnove a portion o! a work for she purposes of sweating a new work. 

* Embed To inpfnde a work in an existing work. 

« ♦ Eel To atter s digits! work by copy lag, setectirtg and modifying portions of m existing digital work. 

Crammaii eierneni 1S08 *Oon%ufstkft^Ced*5 slnsiaH i UsiinsfaiT iisis a category of eights for inetairie. arw* 
me«smmg soi:w;i -a on a repository ffypieaiiy a rendering repository) This wonid typicaily occur for ;he iosfafisii-oa of 
a new type of ptayar within tf)& rsndsttnp, repository 

a; 

* tnstait: To tf>si«i aew sofrwsra on a repository. 

* Uns'tsisli: To removs ©xfstitjo, so!iv*»f attorn s fopository, 

0^::--c\i.- triorr^m i$0'< *Ne3<t'Set-of>B^t»- * {(Add: Sei-Of-Rishfs)} {{QeteSe. S«t*OM=fightsj} ^Repteee. 

ss §M*(X*n}$m)\ {{Kesp: Set-Of-Sights})'* dotinss how r^m* ars; canted forward for a copy of a digiiai weak, if ths 
Nerd-Copy -Rignts is no; specified, ma n<pis tor ths next copy «re »»« same as those of mo currant copy Oinoresss. 
the sot of ngbts ipo next copy ear; be specified Versions of ogbts after Add a:o added to She ceaem set of rights-. 
kTgh;s aJtsr Deieta: ars mmmiroeti the cutreot-set of ngbis. if oniy ngb- codas ore issiod af;er Oafoie:. iher; aii vmwam 
of agrrf s with Srross crxiss are doisisO versions of r?<ghis after Sepiaoe surssumo srii versions of rights o: )hs same rype 

-SP in fiie curron? m of ogte. 

if Rerrratfiifjg -Rights is nof specsfiad, mm !he;e are no fighfs; lot fhe origsnai m& aii tmn copm arc tem&i oui. 
if Remaining- Rigiirj ss specked, shsn fho Keep token can do usod fo sirnpiiiy she axpfossioe of what r:gd;s to keec 
Pskiod A iisi of nghf oocisa ioiiowirig kosp msans mat aii of !hs versions oi fPoss; iistrjO fights ars mpi m me fisrsajosng 
copy. This specii-cakon cars »o evornOsisn by s«e-Boqtisnt Dalote: or Ropk:cs specsfscsaem. 

PS 

Copy Cwni Spscsftexii&n 

For -miosis iransatlioiis. it nuiiv bs dassrabie to provkSs sorris 8cn<t as io ifjo rmnidor of s eop;es" of siie vvork which 
fnay bo oxsicrsod sifnuttanecsiisiy for ;ha fight, fof rsxarijpie. tt may b« dosifiJOte toiiniritfianufnbsi o?cojJf»sof« diesta; 
•so vsofK f hai rriay oe ioaoso out at a isms or viswsd ar & i>me. 

GraiTiraar element 1510 "Cepy-Coaftt ; « (Cepiss: pe&ittvss-iirsteaef 1 0 i y«ismits£t)* provides a condition which 
dsfsrsos tho nufrr&s; of 'copies* of a vsoik subject to jhs fight . A copy ctjwt ossn tss 0, a itxoci number, or unit-Msd, The 
copy-count :s assot^ted with each rich-, as opposed to incre bosng sust a single copy-count tot the digital work The 
Copy-Count for a fight is dscrsrrtsoted oast; ism this* a r:ghs is exaressod. When ins Copy-Count aquais mto, the ngh; 
■rs can no iongef be axsrcssoo'. it tfjo Copy -Ooljjvs is not specified, tno d^auij is oos 

Cmlr&i SpmWcMten 

Rights and fass depend :n gsrssjai on rfgiits granisd Py fha orsafor as wet! as tanhsi rasiriciions s'npossd by ta;or 
vC cifsirsbaiors. Gonttoi spsciticatirsns dsat wfits interactions basweers this crerHors and tbosr d^rfeusots govarning ttso im- 
position ot fyrtpor rsstriotiorss .sod toss. For exssripts. a cfistrfoytor of ?i digital work msy not want an ssno consumer ot 
a digitai w«H 'io add toes or t&mrme profs by Porrsfaoro-aiiy okpioitma ihe poidhaseo digsiot work. 

Ci^^rrrf}! moment ifji, -'Ccsnt?oi-Spoc : a{Cootrai: (ftestrictafete i Un»est'ictsb!«} {Urwhsrgsabtfj t thsrgs- 
abte})" provfoss s condition to specify the isffeci oi i^ssge rights and tses of parents on ihe exercise oi the r$» A 
■ss digitai work ts fsstficrabie it bigtsor isvoi a-biocks can froposs fcr-hof r-ssmcticos fume spoc:t:cat;ons and access spac- 
if:caiions} on She r:ghf: i: is aiiresirictarsio if no }«rin«f resfncilons can bo imposed The defisott sotting is iosiiicfabia. 
A ftphf ts anchsp^Oitbts if no t«or« tses cap hs Imposed on rho ess ot the ngm. it is cnargeebie it mors fees can »e 
ifnppsdd. tfiadelautt is ohai^sabie. 
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Thm $p&sit}miim 

it is often desira»ie so assign a start date or specity some duration as to when a right way bo exorcissc- Grammsf 
Steven :51a Ttme-Spee ■. e{{ftx«Mnl*rv«! 1 Stfcii«^!r»»rvat i &tet*r-Time} Untlh Expiation-Date}* piowies 
•s lor spscrttcation of time rxsnditions oo she esarciss ot a fight Rights may fee granted for a specified t«t» DsSswrt kinds 
oi time specifications are appropriate for different kinds of Some I'sgiiis may be exercised oaring a fixecs and 
predetermined dtaation Some riqhts may b« exsrcised far an interval mat sferis ihe first time that the fight is invoke 
ay soma transaction .Somes rights may as exercised or are charged according !o some tend of metered am*, which 
may bs spiff into separate intervsss. For oscanipie. a signs to view a pictare for m hoar might be spat into sis ten minute 
?<5 vsswiags a fear fifteen mwjte viawings or twenty three minute Viewing®, 

The terms "time* and ''date* a;e ased synonymoasiy io reterto a moment « isms. There ase severat iands of time 
specifications. Each specification represents seme iimstation on toe times over which the usaoe fight applies The 
Sxpirafcon-D&te specifies ihs moment a; which She usage fight ends. Fo; exampie if the Expitatfon-TJaie :s \3an i . 
1S9S.* teen the ngni sods as the tirst moment of if the Expiration-Date is specified as "forever", than the rtgnts 
« are irtteipreted as containing without end it only an aspiration date ts yfven. then ihs ngm can be o.oaiptsed as often 
as desirsd ants! the expiration data. 

Srarrimar eissment ISIS TsxarMotervsS : * From: Start-Time" ss usm to define a preaaiefrnined iniewai SPat 
w horn the star; time to the expiration date. 

trammer etemerit 1S14 "SStdins-intervai : « inesrvaS: •U«®»0»r8ttt»s ! ' is used to detir-e an indeterminate fos 
"opan") start tiraa. it sa-s iisTsits; on a eon{ir>uou$ psaso of isms cvof mkfr tha so^sras aro accssstbio. Th3 porifxi siaits 
op the first aeesss md ends altsr the duration has esssed or tbs sspifatso:! dato ss fsacheci, whicnsvsr eomes first, 
far sscampis, if n'gh; givss 10 houre of continuous access, the use-aiiifstsao vvosikJ bogia when the first acoosa was 
sTiade sari m& to hoiire late. 

Grsmrmf eismsni tola 'JsMer-Ttme: » Tfp-se-R^mainins; Remain tng-Use" is ussd to cisttno a "mstos- tsme." 
that is ; a ■rseasi.sas of she time mstt m fight ia fsotaniiy oxa-oised. it tiifiara from this Siiding-iniervs! st3«cteiic«i m thai 
ihs t«ne that -no Oigitai wor :s sa ass need ooi s« ccntmuo«« for ©sssrapts. it the ricshis guaraalse throe dsys of aocsss, 
those stays could bs spread oai over s inontt;. With this specification the rights can bs s:<<srdssci uni4 the mefe? time 
ss exoatissecS or tiro ejspsrat'tm data is raachai5 ; s^iidwer coskss first. 

-se Rsmafning-ijss:: Trrns-Unit 
Siah-Tsars Hars-t.ints 
Use-Dpratios-fi ~ Time-Unst 

Aii of the i»ne spaaififjaisor-s snciaee tia^oaa^st spac:t:ca!i;5ns &\ thai; ultimate snstar^tsaticn 

Semtiiy Ckm «««? 4 uth&msti&n SpmfficMi&ri 

The present iovsaiicii: pfovidos for varioas secaaty mecnanrsms to be sntrooacsci taio a dssfrihaiion or um scheme. 
Gf3»rsf:^fi.»o««.»itlS56*Acceas-Sp«« . {{SC. Setufity-Ciess} {AtithotUation. A«»tc.fizaJion-fD'{ {OshwAu^or- 
isstioa: Authofizai!<m~fD*| ffi«k«fc TtckeMD})" pt&mm a moans for fostsictsng ijccees aad tfistnerotsswi. Access 
-a? soeciiicatioi-s oas- specify a foqcired sociirtty oiass tor a repository to «xerssse a rigct or a required authorization tost 
that must be satisisd. 

The icsywofd "SO:* ss used to spoaify arttioiouim seaenty Savci tea the repositories involved in the acess;;. if 'SO: 
* is not spsoifiod. the iows-ss. sscyriiy teysi is Sfccsptafois. 

The opfsoaai "AiiShorssstioa;" ksywexd ss ased So speaiy rcqaifod suttjorkahons on the sa;-ae repository as the 
*s work The os-isocst "Oiher-Arsthoriaetion: * Koywo-0 is asso to specify requiftJd aathoiMations oa the other repository 
in spo transaction. 

The options! "Tfeket;" keyword specifies ihs identity of a tiekei rsqu:res for !hs transaction. A transaction invoking 
digitai tic^sta masi taaato an appropriate Oifii!a:i tiCKat afjea; who oaa ;; pnnaP fc or etatmii vaiiOato the neks? cetera 
the trstasactioft cssa proceed.. Tiakets are desofided m gsmw doiati below. 
v» in a rajnsac'ion invoking a isposisory and a document server some rjsage rsgnts may teqiiire thai ihe roposirofy 

tiavs a oarticri'ai' aaihori^atioa. that the server have some authorisation, or that: both repositories have ieossibty di? - 
fijrant; autnorixafeons. Acthori^ssions themselves are digital works {rtsreinattsr- tetsfrod to as an ssaihofi^aSion object} 
that. can be movsc! tj^twesn t^osiiones in iPo aarna mannei as other dipiiai works Tha-r copying and iranstarnng is 
errbtsct to the same rigPts and tees ars other diqita- works. A repository ss said to have an aeihon nation if thar acioor- 
ixatiori objea is cof^tssrisd wtttiin ths repcssitory. 

in some cases, an authorisation asrsy be rcqoirod from a source oihs:' ihan the document server ana repository: 
An euthorasiioft ofijsct rstsrshced hy an Authorisation-! D can contain distal address mformstsort to bs usee to set up 
a commanicssiiops t«nfc baiweos? a rapoertory end the auttxx-ixafeon source. Ttt*se are analogous to pmm riurrsOsrs. 
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For seed access tests.. trie «ommw«estk^ vwsuiei need to bs esiafekshsd and aethoakkStoe obtained before the right 
cock; be c-xefCissct. 

For ons-tsfr» ysaije sights ; a variant or> this scrtsnis m io have a digital ticket .A stcket ss presented to a csgs&i ticket 
agent, whose type is specified' or; She ticket in iho ssmpiosi case a certified gsneac ticks- agar;!, av«ji&&5 on ail 

•5 seposltodes ;s available to "parser!* ths steket. in oiher easss : ttss fccket msycooiatfl ackftessirsg mfcKmaswn for iooahne 
a "spscsai" ticket agent. Once a ticket has mm punched, si cannot fee us«« again for the sarne kind of transaction 
{sinless it is unpunched or refseafcsd m the manner descstbed hsiow.t Punching includes stwking the ticks} with a 
Simastarop otths date and tres is usees. Tickets arts dtgtoi works ano can be sopasd or transtssrsd bgtsfsers repos- 
stones sccomtng io thssr assae rights 

?e in the carrsntfy preferred smtjodimsn:, & ■'punched" ticket becomss *pnp«rtched* or Valreshed" mm tt is oopsed 
or ex-rac-ees. Tha Copy and Extract i>pc;aisorts save ths flats and feme as a property of ihe sisgrtsi sisrket Wftsm a ticket 
agent ;s overt a Sickst, ft can s-rrs&ty cheek whether -no tJajftsti copy was made after ths &ss nrne fha; & vsss punched. 
Of course- the digital ticket must si&vsnhe copy or exlrsct usage rsghss attached thsreto. 
The capaeiiiiy to nnpunch a ticket js sc-ponae; irt tha io-ktwing asses: 

;5 

» A digital work is circulated at low cost with a limitation that it ears bo aseci oniy once, 

* A oigtiai work <$ csscuisssd a west that car: bs asstd once to give discounts an purcttisse-s of othsrwodss. 

♦ A digital work ss circulated with a nckst nneictisd m the pyrchase price and possiOsy embedded in in® work) that 
cars be siseci lor a tu-ars upgrade 

a; 

in each of these cases, if a paid copy is mads of the <j$j& work (incHsfesfj ths ticket! ths newowner wouftJ escpect 
to get affesh funeuncftsc!} sfckst. whether ths copy saiiar has used the worker- not. in coat-asi. ioarisnp,av*osk or simply 
Ssmasferring it to another repository sttopid not reviiailt-e the tic -est 

o%a0a ar>tf /.rjceaiiV^ &$z&s?}f$s*'3ti&ft 

The biiisng tor eee of a diajta; work is teadarnontai to a cammorcsai distfioation tytttm. Grammar BerriSftt 1517 
'.»ee-Spee: - |3chedui«ssS»D!sc8uot) r?egeiar-Fs-e-Spec I Sshsduieci- Pee- Spec i Msrkuss-apee* »rov:Os:t:5 ranpe 
of options for bifiing for ine use of osgiiai works 

A key teaiprs ot shss approach is ids devsioprnem of iowoverhead » iking tor t:rs.p8actions in potenttariy smaii 
arrtoprtis Thps. it besomm fsassbts io coiiact foes of oray tt tow cerik; mm tor tttousands ttf tfansaations. 

Tne gramtaar Oiffatoptistes between uses wme The charge is cor use from those where k is mstsred by ids krne 
anrE. Transactions oati support iocs thai ths sear pays for usrrsg a digits! wo«t as wsfl as irtcerrrtves pa:d sty itte dghf 
grantor to peers to inortce trtere to ase oroistnbeie ths Oigiiai worsk 
; f s Tns ostionai schedafed diecopn; rsters to the rest of the fee spsestscation-biscounfing it by a percentage over 
time, if it is not specified than there ss no scheduled discount Ragaiar ios s pacifications ars constant over time. 
Schedules fee specifications givs a schedcie of ciaies owsr whicn the fee specifications change ivtarkep specifications 
are usao 1 in s-eiocks lor adding a percentage to the feos aifeady being charged. 

Gr.i-itrnaf B&?>i-v,i f IV! fi 0 &chs<fai«d-Oiscouri{: ; - ■ Schectuierf Discaeat: (Ti-rie-Spec PercemageJT A Cvd^-d 
•tc uied-Discoiint is a esscntieiiy a schednied rncdihe; of any other lee speer-iostion for this version of the ngh; of ths 
digital work, (tt doss no- refer to ehkdrep or parent digital works or to ofhsr ye;-sions of rights.;, it is a list of pairs of 
times and poroeaiagss. Ths roost facer;- time sr- ths isst -bat has no; yet passad at ttte time of the -raftsiiction ss the 
one In effect. The psreehtage gives the discount percentage. For eseampis, the number 10 refers to a 10% dlseoehf. 

Grammar -hcrrisni 151$ *R«8ufi»r-?«e-%jec : i Incentive;) jP«f-Uss«8pec ■ Mat^ieci-ftaie-Spee i Bast- 

■*s Price- iSpec I Cat;- For-Price-Spet] {fviirj- k'loney-Uni- Par: Time-Spec }(ito: Moaey-Un;; ^er; ThTC-Spec} To: Arc- 
eoa«t-50j" pioyides tor severe! Ktnes oi tse spscificaricns. 

Fees are paid ey ibe copy -owner/uses -o tiie tevenee-ownsr st Fae; is spsclhed. irweftiives as® paid by the asvaoce- 
owner to ths user if Irsfiorititfer is sescif led. If the SftfttJ spsoif icatlon is given . than there is a rnieieturn -so to be sharfjsd 
per isrna'Span uni; to; its use. tf tha Max; specification is §iV80 s than t-iere ss a rnasirnusn fas to be cheated pet txm- 
S5 spec for tie use. When fee: is specified. .AcfeouHMO iderstifieit the accOenf to v^fuct: the tea is \o be paid Wrters av 
eaptiTO: is epecitied. Aeeoant-IO idenfr-iss ths aeoonn- from which ths fee is to be paiet 

Qitihtmea element f$80 "Fer-Usss-Spes; « Fer-Usa: fVSsrp*y-erstt" defines a sta^pie fee to be paid every lime she 
right ts exercised, regardless of how much tiros the transaction takes. 

n.tramm.af sierns.-ii i : : .:2f 'Metered -Rate- Spec • » rVfetefsct: fvleney-tjeh Per- i'inie-Spf ; c v defines a meioroc: 
ss lee paid siccosding to how iong {he ngftf is axeraised. Tt;us : ih« stms i; takes to cositpisse ttte uarieactior- dsteratlnsa 
the tea. 

G:;5:r : mer §kir«ar:< 152? "Bsst-Pt ise-Spee : 5! Beet-Pi-ioe: SKortey-arsit mm- fstoney-uaii" is uses to spee.:;y a 
deei-prlca !ha; is detarmineci wnen the account is setiiad This spaoiitcaiioa ss to aacommodafe special deais, sehales. 
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sjr-s pncs w :g that dspsrfds.ori inionTiation that Is nor available so fne repository Ait fse specifications can be combined 
wan tickets <a authotizstic-fw thai «ookJ indicate }hat the consumer is a whoissafe? ot ihal he is a ersfoned customs* 
Of snss the s«8s? be a«sno«s:3d m son-is way Ths amount of snonay 8* ihs **ax: fioks rs fhe rrssximwj amount iftas ths 
use win cost, Jim is the amount snas m debit'Scf ■rem the eredii server However, when the transaction is 

•s oifsnsaseiy nseor -disci, any excess amount will be jstumsd to ;ha consumer m a separate tiansasiwi. 

Gramma^ ai-s^eni '^aii^er-Pr-oa-Spas: ~ Cah-^or-Price * ;s wr.x-.; to -ii "Bast-^rics-Sfsso" in the- it it. 
intended to accareinedate esses where- press are dynamic, A CaH-Fcsr-FYice Spms requires a owsrwnksatic-n w#i 3 
dosser ic determine fhe price. Tms option csfifK* so exercised « tie repository cannot carman te&e with a deatef si 
the time thai ths- rignt is sssorcisacs. it ts bases or a secure transaction vrhsrsoy the deaisr' names a price ?o exerciss 

?<5 ths rtght and passes aiono. & $m\ certificate which is referenced or inducted m the billine process, 

C^nmm.::: electee! i?;24 *ScbeduSed-Fs-a--Sp"3<:: - fScf-ecieie: {Tjj-K-a-Sp^ec Regular- Peo-SpocjV is used to pro 
vide s schedule of dates ever ytfiwh sbs ies specifications change. "fPetes specification w<h 8*& most tsemt dsss not 
sr> the ftjfare f$ }he orta taat is « effect This; is sSmt&aj to ow more gsnetai sbaa ths scheduled discount, it » ews 
goneiai. because s provides a means So vary it?«s fso ao/esmant for each time period. 

« G^mma' c:';:v ; ;;ni vlsi' 'k'-SJ kUp-SjiSC. ~ tvlam-p. peres-ntags To; AoCOuriWD* iS p-O'-:dO0 for «Cid-nt! iiC?:- 

csmage to the Ises aifesdy bsif}§ cf-srged. Fa sxampis- 8 5% rf;3rki;p msans ihsi a lee ct 5% of cimMm lea so 
for wiii be aiiocafoiS to tiss ?5istf -Siiio): A r-sarKsp spsscsiscatior; cae t>a apssissd to aii oi She oshe; ktnae of -ee spscsticaibi'is 
St is typca% \md m s she-- provided by a rfisUibiJtor. it fgisrs ?o fees assccssted with d-siooks xh&i ars parts of th« 
cutrsttf d-biocic Tfjis rn^ht ea a com«R«rti speoilication ioc use ic tax8$ : or «n Sistrbutof ovettiead. 

a; 

REPOSrTqBY/rBANS^TipNS 

VVhan a «ser f«qus$t«i ascess to a dipsiai work. !he reposiioiv vm iatisate various «:aasattio-;s The combioat ir>;i 
oi sransstei:ons invoked wt« rjops;nd on She specifications s^&igned to; a rj&age noil? The»s 3-s ihiee tessc types of 

2$ tims&ayzm. Sassior; initsanrxi Trssf}sact(Oi?s Fmanciat TraesactiOfis ar-d Usage Trar-satfsoas. tSecataiiy. sasssrsc ini- 
tiation transactions ars insisted tirsf so ss&tbasR a vaiid session. When a vattd session >s esfabiishoo. transactions 
corfsspondin-j to ihc vanou® usage ngpts ate invoked. FinaHy rcqussr specifie transsctions arc osriormsd. 

Transaoiioj'sa occur baiwocn two repositoiias (one acting as a so-vat), Pstwean & fsposstory and a doewnsntptey- 
bank piafform io g. for sxec-sisng or viewing}, bo; wson a repository md a crsdii sowor or bofwsen s ropossfory and an 

se aritnorteatiop sarver When transacsions occur setwson mora than one rspo&itory. it is assismad that there is a reiiabis 
oomintiiiicatios channei ooiwa?!n ibo repot; -tones. For exarnp-s the couio m a TCWiF ohitcnei or acy otnor s:oirsfnor- 
cisstiy nv.Hstele channel she; rm d-:-iii;-ir.' capafsiiniss fc; cfefocting nr;d corrociioo tinncraissiCMi osiOic. However, it ss rax 
assumed -hat the conic^fiicatson channai is isscare. pKWis-ons for sseiifisy ma privacy are part ot tiic rsqeiierasnts 
for specifying and impienisnfing iopositorios ano vtm form the need for vanous f ran sac- ions. 

Traf>^?>f5ss.f£?H 

TVansaoiions require that there be sans eon-fnueicatior- bstwssn repostoss. Cc!fiw>«ftK»t« detwaei's rsposi- 
tories occurs* «\ unite iorrnari as maseaoae. Because the canintJnmaiion iint? is assumed to be -jnseeijre, ■&% {twim- 

•so rscfittons with repositories tbat are aoove tiio iowost security oiass aro oneryptsd utiiaing a puoiic koy onerypiion 
techniqae. Pubisc key encrypaosi is a west known leeiiaique in vhs encryption arts. The terra key refers to a rtumsnc 
cede that is used mn etwryptsoe and decryption aigorittims. Keys cc-it-e m pairs, whate Vritifjg keys" ate asad to 
oncrvpi data and "'cbeckniq keys" «ss used to decrypt data. Both Wiittnp and checking keys may be peotic ai private 
Public keys are those that are distnbused to others. Pnvate keys are s'nalntaiosd in cor-iiderics 

■rs Kay rnarjagerneni and security is iosirurnan-ai m She success of a public key snefyptioe system In tee csnsniiy 
prsferred embodlmsnt. one or mors master repositories the keys anci create ths ioentiticatson cePiflcates 

used by the repositories. 

When a sanding rspositon/ transmits a raessagrs fo a receiving raposifoty. the sanding repositon/ encrypts nil of 
its data uetng the punSin writing key o? the receiving repository Tne sending rspositon/ srsciustes its nmm, the mm ot 
vi5 the resolving repository a session identitfer suet) as a noaeo icieacrloao oetow;. and a message ceuntai" jrt each mes- 
sags. 

in this «sy, the communication can only be read ftoa high probadility! by the receiving repository which holds the 
private cheeking key for decryption. The auxiliary data Is ssoo !o gu«;d agairist vanosis repiay atfessks to seiienty if 
rnassagas ever arrive with the wrong coi.mter or an otd nones . tna repositories can assuiTis rha) sonisone Is interfering 
wiin cotniTits^cation mi ttse tsansacSior; !er;?i:na;ed. 

The respective public keys for she rcposiiories !o be used for encryppoe are obtained in the rsgistration iraosaction 
cfasorib>sg Bsk>w. 
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Session imtMtw Tmmaeitem 

A usage- transaction s samea oat m a session mim$<\ reposiionss For ossga transactions involving, more Shan 
ens repository, or for financial transactions between a. repository and a credit server, a registration transaction re per- 

•5 formed. A second transaction tanned a logs'* -ransaotion. may also be needed to mmt& ths session The gcsal of ihe 
registration fransaction is to establish & secure channet setwesn two repositories wtu> knew eacb others identities, As 
st ss assameci ihat #ie commsmlcahon channel between the repositories is reilabfs but not secure, Jhare is a risk thai 
a non-repository may mtmre ths prcaosoi in order to gam iitssgitn-nafe access so a repository. 

The rsoteiration transsctson setwesn two repositories is describee! with rsspsct to Figaros 1 S srjd 1 7. The steps 

?<5 bessribed ms irorn if re perspective of a 'repository. t" rsgi&tewg Its Identify wilh a -reposrfory^h The registration must 
do symmetrica! so B» same mi of slops w«i be rspeahsd for f3pcssiusy-2 registering its identity wrth repository- 1 
Referring to thgere 5 6. repository- 1 first generates an encrypted registration identifier sisp 1S0t and then generates 
a registration message, step 5602. A registration message (6 corspnsed of art identifier of a master raposifoiy, the 
identification certificate tor She repository-? and an encrypted random registration identifier. The identification certteita 

« is wictypm by the master repository in its pwa» Key said attests- to the tact that the repository {hens mmfoty- '■ ) & 
a dona llde repository. The identiifcattoa certilicate aiso contains a public key for the repository the repoaitQiy security 
ievet and a irmesiamp (indication a twm after which this certificate is no longer vato s Tee regis! ration Identifier is a 
namoer generated by the repository tor !his registration. The registration ieteniater is isotqiss Jo m session an<3 ss 
orioryptBci if? repository i's pt'mSs The rsgisfrarion Ideatllloi' Is ussd to irr^provs socnniy of aiJ'hsniicaiion t;y ds- 

28 tsottng csriasn kinds o? corrsrtsunscsitons basod aftacKs. Rsposifory- 1 thsn transmits tha rsgisirsiilon mossago to ropes- 
itory-2. step J603. 

Upco r«cort/s'ig the fsgtsttiitsof) rssssagij. ;oposifofy-2 daterrnitm II st t?as the nosdeci pridilc k«y tor ths rsBStsr 
roposiiory. siop ; 804 if ropositojy-2 doos not have the noetioo pad-rc koy to fiasrypi tha idorriiticaSron caitsfscafo.. -he 
registration fisaisaetion tarmiiiates in m error-, step 3 612. 

tesmrtmq that repository-;? has the props; ptrtsiir; Koy S50 dent sfssai son ersrtifieaio is dfjcrypEsd, step 1605. Repos- 
itory^ saves ths encrypted rogistration idon-iiisr step tS06. and extracts iha roposstory sdsntitier sfsp }60r. fm 
oxtractsd repos-iiory fcionttfior is checked a-3».:ni.-5 s "hotiist" 0; cornpion-iised cioewn^ns repostoiss. step s 608. in the 
cisfrsi?% proferrsd embodJiTiisni. oast) r>;posl!ory will cor-rain h-iofitsts" of oornproinssad repositories, if rhe rsposrtory 
is on Site "not-isr. the rogrstrtsiion transaction terminates in an arrorpor s-op 1618. Sopositorsos can be removed trorn 

st> ths hotii&s wnsn their certificates sxpiro. so that the iist doss no! need to grow wsthost bound. Afso. by keeping a snort 
s'sst o? hrsiissf certiticaros tnai ri has pr oviossly rss;?5ivod. a repository can avoirs ids work of acttiaiiy {ping ihf oagn idrs 
tsst. Thsse lists >voyld m encrypted by a trrastor roposstofy A mew vsriaitors on tbs approach to improve st?iC:oncy 
wocid have !he rsposSo-ws first axchanae jfcsas of nasnos of froiiist sorifticaios, yitisfrafsfy exchai5girsg orrly thoss issis 
thai they had noi provtousiy raooivsa. Tr;o "hoifiafs" are immtewS srxS dissribytod r?y i^aste; raposriorias. 

rrft Hofs that mhst than terminating in error, the transaction ooufd rsq^asi that another registration message de sent 
dassd or? an sdenhticatiori cepffscaro croated fey anothsr rrsaster rapositoiy. It; Is may be repeated until a sarisfactory 
identitication certitteeio is toand, or It ts dotero-iinsd that rrrisi cannot bo esfabiserisd. 

AsscsTiifip thai ths repository as noE on the hotlist, tho reposrtory identification needs to os vefitiec;. In other words 
iepossiofy-2 naerts to vaiidBts ihat ths? rr?r>osiiory on the other s?5d is rsaiiy reposittssy-'s. Th:s is :ormad psrtofmarsca 

•so tesiing and rs performed in order to avoso invalid access to the repository «a a socnterfoit repository replaying a re- 
cording o! a prior session Initiation between rsposltory-1 and repository-;;. Pehosmance testing is satiatsdby repository- 
2 genafstit'sg a pedorinaoce rnessage ; step 1603. The psdonrrsoc© message ;s>nsists of a nonce, ths names of she 
respoetitrs rapositorlss. the \stm and the regsiraiiOft identifior received from repository-! , A nonce is a generated 
massage based on sorne random and variable inforrsaSion {e.p the iims or the temper-aturs.; The notice Is used to 

*s cnoek whether repository- ! can actriaffy exnldrt oorroct oncryptmo of a ntsssago ustng the private keys it claims to 
have, on a message thai ,t has never seer; Betas. Ths performance message Is encrypted ^sme ths pedis key epecitsed 
sn ths ragistrahon message o! ;eposito(y-1 . The perlormarioe message Is trw;sn>rt!e0 to ieposiiory-1 . step 1510, where 
it Is decrypted by repository-l as>ng its private key. step toil. Repository-t fhen ohesks to make scrrs that the names 

01 the two fsposiiorttss are correct; step 1.812< thai the time is msim% step 18.1 3 &m that the rsgisfrafiori identifier 
5C corresponds io she one li sent, step tSH. tf ar?y o# fhese rests taiis. if;e rransaction Is torrnrrestsd per step 1816. 

Assuming that ths tests are passed- repository- 1 transmits ths nones to reposiion/-2 in theater, step 16 ■ S, Fiepository- 

2 then compares me. received nonce to the enema! nonce, step 1 61 ? . if they are not identical, the registration tf ansactson 
tarmfoatas In an error par step 161S If they are tfje same, the roglsiratlon transactsof} has successSuiiy compif;!od. 

At this point, assuming that the transaction has not terminated, tha repositories exchange messages containing 
sossion keys jo do used m alt cm^mmicatioris during the sessrost arrd synchronic Sheif docks, f rgere 1? sliestfates 
the session rnfofmatron exchange and ciocK synchronisation steps (again f torn the perspective -of repoeifory- t } re- 
ferring to Figure 17, retsository-t creates a session key pair, step \7Q\. A first fey Is kept privets and is ased fey 
ieposltory-l to .enctypt rnsssages. T he second key ss a public key need by roposiiory-2 to decrypt messages. The 
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second key is encrypted using the pubise Ney of repository-^, step 1 702 and is sent to repository -2, step 1 ?0& Upon 
recent. rspesliory-?. oec-iypis the second key. slop 1704. The second key ts used so decrypt messages in subsequent 
oommuoications. When sash repository has eompietsP this step. «sey sre both convinces thai the other repository as 
bona tide and ihsti ibey are communicating vnth the ordinal. Each repository has given tfts other a key to be used in 
•5 decrypting ta;tt>or eorriraunieatlons Owing the session. Ssncs ifcjsi key ts fiself transmitted in the putsiic key oi me ;e- 
cewwo, repository oniy si mi ee a&e to decrypt she key mkxi is used so ossryp! subsequent, messages. 

After she session loioeriatlon rs exchanged, the repossesses roust synchronic- jheit clocks. Clock synenroncrstion 
<s used by the repositories ie establish an agreed upon tarns bass ?c-f She llnanclai records of »»ir rm&ai irarisacslons. 
Rsteroog tma to Flgare 17. rapcsrlory-E Males ctacK synchronization by generating a time starry exchange message. 
?<5 step 1 ?06. and rransrniis k to repository- : . step 1706. Upon receipt repository-1 generates its own time stamp ;nes- 
sags, step 170? end iraosmfis It back to teposttory-2. slep • 70S ReposiSosy-i; doles she careen* lime, step 1709 end 
stores the time reserved irom repository-- 1 . step 1?10. The current" feme iseomperedio tnetirne recsiveciJfWi repository- 
1 . step- 1 ?i V- The difference is then checked to see if ii exceeds a predetermined tolerance (e.g. one mmuts), step 
1 712. a « does, repository-:; terminates ihe trsnsactson as -his may indicate tampering witti She repository, siap '713 
« ii not repository-^ computes an ackusied Sane delta, step i?H The adjusted time tieiia i& the diiference between the 
ctock time ct reposkory-2 and the average of the tiroes {torn roposftoty-l and repository-2 

To achieve greater -scceraty reposiiory-2 ear; request Retime 39am tip See fixed wmfesroS times ts.g. five ikrm}.. 
repea; the dock synchronisation sieps. and average the results. 

A second session initiation iiansactior; is a Login transaction. The Logsi transaction is used so check She astheryiicisy 
oi a user requesting a transaction. A Login transaction is part-adaey prudent tor ihe authorisation oi tinaneiai transse • 
yons that will be charged to a credit sewer The Login transaction involves an interaction between the eees at a user 
interface aees tf-e credrt sesvai asscciatsd a raposrio-y Tee s'ssornjatioe exst-anged here is a iogln string seppSiad 
by the rspossio-yycfeeii server to ktentiiy itsstf so the asm. and a Psrsonai icientittsation Momfeer tPlNj prrsvioeP by tne 
user to identity hanses to she credit server in the event thatlhe user ^accessing a credit sewer on a repository deferens 
item tsjeor-e on wtkeh the ess; intertsistts resides, exchatipe oi ihe ifiionrsatlon vsoeki be tsncrypied rising the giibSicatiP 
private keys ot the respective repositories 

BHIhg tmtsmxiom 

se 8::i:og Ti^nsaciions are corioemsd vftirt monetary transactions ^sih a credit server SiiilngTrarisactions are carried 
oat when aii e«w eonPitions are ii-iSistrsd and a nsage tee te raqeis-ert for prenttng the request For sne njost pert, telling 
transactions are weii nndofstood iri the erase of ihe ah. Those Transactions are between a repository and a credit server 
or between a orsdsi setvet and a Pliliiro cisannghouse SrlefSy. the required tiarisactror;e sneiade tt;e Soilowing: 

;ss * Registration and LOGIN transactlone Py which she repositoiy ana user ostabfr&h their bona tides to a credit server 
These transactions wocid be enmity lf?ter nat m cases where the repository and credrt sssver ate «rnp)emenled as 
a SingtosysserTi. 

» Registration and LOGIN transactions, by wind-: a credit serve; establishes ks bona tides ;oa t;;i!!nq cieatingiiorise 

* An Assign-tea f ninsaeiion to ittss^o a charge. The infom-ai ion to this tr-insaci ion srouid if scitjete a transactk>n icten - 
•*o iifier. ihe iPeeiiises of the repositories in the transaction, and « isss ot charges srom the parts of the dsgiiai work ;! 

there has been any uneseaf eveoi in sbe transaction such as an inierrcpiion of cornniuoicasions. tbai information 
(a included as weii. 

* A Begln-cberges iraneaction to assign a charge This transaction is mych She same as an assign-tee Sransacfi-ori 
essospt thai Is is used for rnerered use it includes the same Ifiiorsriaiion as tt-s assipne'ee Siwisactiors as wets as 

*s the etssgs ies inionnasion. The credit -eervor is then responsible tor rurtntrtg s clock 

» An £nd-chareea transact ion to end a charqe for meterocs use. isn a variation on Shis approach, ihe repositories 
woeid exchange periodic charge Intorntatlon for each block oi tirnc } 

* A- teport-chsrpss transact io« bsfvseen a persrsnaS crepii server and a billing clearinghouse. This transaction is 
invoked at ieass ones per baling period, it is used to pass aiong intoisrraiion about charges. On debk and credit 

5C cards, thfe iransactim woutd also be ased to update balance inforrnatien and credit limits as needed. 

Aii biiiinq transseaons are given a transaciion ID- and ass reported to the credit severs Py beta ihe server and the 
ciiertt.. This reduces ps;ss;bie loss ol bitting inionTissiion II otse of the parties so a t^jnsfictton loses a banking card arid 
provides a chscst against anp&nop with she system 

Umg® Tramsctfcm* 

After the session initiation transactions have been completed, the usage regaesi nsay than be processed To sinv 
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pis'y the description ot rhe steps carried out processing a usage request, the term requester & used to refer to & 
repository in the request s*ods which is Insisaiir -g a rsesusst; and s»e terra server ss usod to refer to a repository « Ihs 
ser* mods sad which ccmisinsiiie dssifsddigMi «ork in rosny ossss seen as requests io punt or vie w a work, the 
requests arid server way he the same device and ths transactions described srt the fottowtng would oe entirety aiternat. 
•5 isi such tnstanc&s, cestasrt traosaetJQR sieps ; such as the registration ;rafjsaeik»v need noi be performed. 

There are seme corrnion steps that are par; ot me semantics of at! of fh© Msage fights ifi&sis&ctsons. These steps 
ate referred to as the- cornmcsn transaction steps. These ars two sets ~- the "opening* steps and she "casing" steps, 
Per mmptozfy. these are iietetf hew rmherfhsn rt-peat!!jgth«m si the descriptions of all ei the usages rights franis&ctions. 

Tran sac trans can refer to a part of a Oigjta! work. a complete digkat work, or a Digit?;' work containing other oigiial 
?c works. Akhoaqh not described in detail herem, a Transaction may ever; refer to a foidsr comprised of a psuraiky of digk&t 
works. The term "work* is nsed ?o setsr to what ever pettier; or sot oi digl-ei «o;ks is hemg accessed. 

Msny o? the steps nm& involve deiermiining it certain eoriokioos are satisfied. Reesil that each usage riotsi may 
have one or more conditions which must be satisfied beiose the sight cert he exercssgd Digisai works isevs pans and 
pans have parls. Different pans ean nave different nghts and iees. Thus, if is necessary to verity thai She requirements 
« are met for ALL of the parts that are involved sn a transaction For brevity whan reference ss made to checking whether 
the cghts sxistsnd oondltlosis for exercising ase sstlslled, I; is meant thai a;; sacrs checking takes place ior each of ins 
relevant pans of tne work 

Figure IS illustrates the initial comrnort opening and closing steps for a transaction. At ma point it is assumed that 
registration has occurred arid this* a 1rae;ed" sessio?i is hi araes. Gcri-jrai toats are tssis on liaago rgh-s associatod 
wm !hs foiPcr eooiaining the work or scam centsmiog io-dor higher in t he fiis system ai«ra>'chy. These fosts correspond 
to roquiremorks imposed o;i tho work as a coassqjjooce of sis basaq on ths psriisciar fspos««sy. as opposed io soing 
aSieciied to trie wosk kaeii. Raiersing so f sgase tS : pmrto ierhaiieg a asaga iransaciion, -he raqueaSer poriorais any 
geoeras -ests -hat are rep^ifsd eotoio iho ngh; assosiatsd with she irarssacten can fes sxercssed. stsp, 10)1. For ex- 
amprs, iosfaii. unins;aii and dsfeis rights may bo impiomsnted to roqusrs that a rsqcasssf nava an at^horwailon csrtit- 

ss jcaie bofors the right caa bo smromi. Anottier ex;5o;pie is the seqiiirsfner;; ;hat a dsgkal iicKrSba prsseoi anO punched 
before a digital worK may m copied jo a req^esSer it any of the gersoras fesSe Saii. the transaetioc is not initiated, stsp, 
! 802. Assuming ihar such roqulfed v%m ara passed, upon receiving tho usage request ;hs servsi gsneratas a trans- 
action identifier Sbai is used if- records o; repasts of tt!e SsarisactiOf -. step 1 SOS. The server then chaeks wheihs; tfje 
digifai work has Peon granted the right correspenoiep to tiie reques-eo iransactson. step 1804. it the dsojias work has 

se nor besn grantsd the ri.-jh; coffsspondifsg to the request. ?ha iransaction tenrirostss. step 1805. It tna dsgitat work has 
been granted -he repuesiod right, the server ;nea detar!0:ries if the vaoons cencii-ions tor exercising she right are 
satisfied. Tims based condihons are examined, slap J806, Thess conditions ars checkad by examining tho «me spec- 
if;£S5t:or; for the iha va;s:or; o- -he right, if any of the conditions ase net satrskad, the trarisaetior; ierrriinates nor s;ep ?80S. 
Ass-jsTsicg tnat the time nased conostions are sahsiieo. the seiver checks securky and access -conditions, step 

;k i 807. Srsch seciinty and access conditions ara satisfied if: t ) the requester Is at the specified secunty class, or a higher 
security ciass. 2) the server satisfies any specified aothorkahori jest and 5} ins reqoesfer sabskes arsy specifiisO au- 
Ihorkration tests and nas any required digstaf tickets if any of the conditions ars not satls?:eo. the franca^ ion tsrcnlnaies 
par step 18QS. 

Assarnsiig that the security arid access coed stone are all satisiteo. trus server checks the copy corsnt eondiikjn, 
•so step -SOS if the copy count eguats zs?o. then the transaction cannot se completeo and She transaohon tsrminaSos per 
step 1806. 

Assamsng that the cosy count does not equai mso. the sesver ct;ecka if the copies si use lor tha requested right 
is greater than or equal to any copy count tor the requested nght for isievant parts'), step 1809 if the copies in use is 
greater than or equai to the copy count, this indicates thai usage righis tor the version of ;ha transaction have been 
exhausted. Aceordintjty shes serves' termsnates the transaction, step 1805. If the copy eoant Is less -nan she copies m 
use for the transaction the transaction nan oontlnue. and the copies in use wooid he incremented by the number of 
dtgitsS works requested in the kansaciioa. stop tS-0 

The senref then nhecke is she digital xvorfe has a Loan "access rsght. slep tSit Thor'L.ofin'ancosa right isaspec:ai 
case slrwe tmmxQ rights rsiay be pi-esenf sveri thoogfi si! copies are toaried out it the digkat wor k has the "Loan" 
5C access: right, a check is mads to sea ii ait copies have deen te&fwd osi, step tStg.. The number of copses that coaid 
he loaned Is the sum ol the Copy-Counts for as: ot the versions of the loan right ot the digital work. For a composite 
wort* the roisvant figure ss the minima! suoh sum of each of the coniponenss of tha composite work. It ait copies have 
besm loaned oui, the re:rr;aininr.i rights are Oeterniined. rjlop 1S13. The reiTiainintt-r:gf)!sisdf5teiSTiir;ed from this remaining 
fights specifications trom the versions of the loan right, ii ihero is oniy one version oi the Loan right then the rfeter- 
rsiinatlon ss sirnpie. The rei^airang rights are the ones specified sn thai version ot me ism ugh;, or none if Remaining- 
rtighss: is not speckled, it there are snuiiipls versions of ine t.oan right: and ail copies of all of tne versions are loaned 
out, then the remaining rights is iaksn as the minimum sot {snterssction! oi remaining nghts- across ait of the versions 
o! tne loan nghi. The server then determines It the requestad right is in the set of remaining ughis, step f 814. if the 
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requested ngnl ss not m the set of remaining rsc-hts. the- server terminates me transaction, step tSOS: 

ff loan is not a usage right toe the dsgtta! vsork or -if all copies have not been Scaned oui or she requested apt is tn 
the set femsmmfj rights, see conditions tor to® right are then checked, step t8i§. This innate various -Bwrctai 
transactions besween she repository and associated credit server. Further, eny me?srifi§ of asaqe of adiaifsi work v*!i 
•5 ;;o)Tifrsenca. if any S'istanciai transaction s'asis, the transaction terminates per step 1805. 

it should fee noted that the order in which the eer«S8©ns are checked need no; toiiew me order of steps ? 808-1 Si s. 

At this point nghs specific steps are now performed and are represented hers as step 1816. The tight speciitc 
steps are described in greater detati bsiow. 

The comrfton ciosino. transaction steps are now performed. Each of ins closing transaction steps are performed 
?v t>y she server alter a success}*.!! compieiion of a transaction Mer nng Pack so Figure IS. ths copies in use vafoe for 
the requested siohS is decremented by She number of copies invotvsd in the transaonon. step 181?. Next if trie riphi 
had a. metered usage tea specification, the server ss.ibsntrcis me elapsed timetrem me Remsinrng-Uss-Tfrm associated 
wth ths right for every pari involved in the transactc-o, step 1S18. Finally i! there ate fee spectffcassoris associated 
w«h the aqrtt ir;o server initiates End-Chares finaociai transaction t» oMitm bmrnf step IS f&. 

r.i 

An important area to consider is the transmission ot jhe dlp,itat wens from ins server to the requester The trans- 
mission protocol described herein rsiers to events oecuotng afisi a valid session Pas been creased Ths trasjsmsssion 
protocol mvsi nandio the case of disruption in the communications oetvvesn She reposiiones. iS is assumed tfm inter- 
feraccs soch as inreciing nosse on the cornrriitnsc&iion ehannei can be detested by ma integrity cheeks (e.g.. pansy. 
cheekBursj, etc:) itmX are ousts iaro ttre tssasport proiosei ersd eae rsjs disaessea in deiasf Persia 

The umfef^fng gesn' in trse tasnaaiissbn pretoeei is to preclude cahefa taifoiB modes, such sa assficieas or aeeioerita; 
sntsffereacs on ths cornmaaicatsons chanasi. Suppose, for exampis, that a user suite a card *:ih the prsdst server at 
a apecrtic time aear iha end oi a tsistfisacttcsa Thea; ebon id not be a vulnerable time ef whtcn "paikae it?e card* caaees 
me rsrxssiiorses so taii to ceaectiy acceaa- for the ntsmber o- oepsas of ths work that have bsea created Restated, there 
shoaid ha no time at which a party can break a connection as a means to avoid payment attar using a diortai work. 

if a transaction is ioterrapiea (ar-d feats), both rspostees assto-e ttse dtgiias works and accounts to ihass state prior 
so ths timum. snadeio reaoros of the tat-ura fcseif. 
ee Figi.«e : 9 s a stare diagram showing eseps -n ths process of transsTiittiasg inforrnafion darsnp a transaction. £eoh 
bos represents a state tst a repo«itory sa sslhsi the server mode (above the centre! dotted sine 1 aO t ; or «me rsquasles 
mods Cbeiew the dosed line i 90f Solid arrov^s stand fortransriions between states. Dashed a newsstand for message 
aoirsmnniaaiions oetween she repositories. A dashed message arrow posnPne, to a solid transition arrow is imetprated 
as meaning met ths treosi-iea ttsum piece wfsen she msseags is received. r.iniabsfod transitton arrows lake piacs 
vis yneonditionaiiy. Othar labeis on slate transition arrows dsscabs conditions that trigger ths transition. 

Rsiernng now to Figure 1$. the serves is inrSfaiSy in a state 1S02 whoe a new transactor; :s IrjirsaSsd via start 
message f SOS. This message Sneiadss -ransaction inlom^ttfon snsiiJdiag a ts-aasacflon ioenfifier and a count of ths 
btoeks of data to be transferred. The requester, initially in a wait state then enters a data wait state 1 305. 

The server enters a data transmit state 1308 and transmit* a Pioek of data -90? and -hen emers a wait for ae- 
-a> fcnowiedgement stale 1 908 . As She aafa ts received, ths requester enters a data receive stale I90S and whsn ths data 
btocks are compieteiy received it enters an acknowiedgemen- state 1 910 and transmits an Ackaowiedgemens rnessape 
1911 toitte serves. 

if there are more bfsckstosend, the server v,'aiss until fscesving an Aeknowisdgsment message from the requester. 
When an Ackaowiedqerrjen; message is reeewed it sends the next block to the requester and again waits tor acknowi- 
*s edgernarii The requester aieo repeat's the same cyois oS siates. 

ft me servsi detests a communications failure before ssnping the tasi siock. si eniers a cancsiiation slats ;9f 2 
Vshe;>sia iha transaction is eanceiied. Simiiariy if the sequester detects a corrsmenicaiions iaiiure helore receiving the 
fast bfosk if m*t& a ctsneaiiaiiea siate tat 3 

ii these are no snore btocks meod, the server commits to the transaction aod wees for the fm\ Acknowledgement 
instate 1§14. tf there is a cornai-jnieations failure bsiors ihs server receives the iinaS Acknnwiedgement rnassaga. it. 
sun commits to the tranescsiosi but ineiadesa report ssboet the evst-f to its credis server in stats t9>5. This report serves 
two purposes, ft wiii hstp iegiiimise any $mtm by a wet of having been ms& tor raoeiving digits! works that were net 
compieSely received. Also it heips So :denfr?y r^posifasies and cmtmurticatKa^ line;; that have ■suspicious patterns of- 
use and mterrupeon. The server shen enters its compietion state 1916. 
•ss Or? iha i equester «:do, wiias? there a; e no mot e biocks to receive, the raqceater commtts so the transaction cn starts 
tf She reqtiester defects a commaoicntions hiitisra at Shis state, it reports the fasinre to sis credit server in state 
l&tS, natsttii cemmae to the transaction. When ii has comrnissed. rt ssnos an acknovffedpetnsni message to the server 
The server then enters its completion stale 1 919. 
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Tm my property is shat bosh the servor and the requester canes! a transaction if it $ interrupted neiote al! ot ths 
tteta biocks are delivered, and commas to « if at! o! the cista blocks have osefi datrverad. 

There is a possiRtitly that the servsf ma nave sent aft of «ss data bsscfcs {and commnted} but 1he requester Witt no? 
have rscsivsd as of iheoi and wat eanoei ths transaction, in this oass, bosh repositories wiii preswrtafety dsieei a corn-- 
•5 OTtinleatioos f&tiuie m\d report tt to tnssr credit servos: Tim ease wit probably bs rate sweb it <s«ps;-nds on vety precise 
tsmingo! the cesnrminieaitans fakure. Tins ©rtfy ccfssaqtmncs will fce that th3 user s! m« requester repository may ura- 
tes rsosesi a rs&nd from she credit savess - and 9\b ease lor thai set'end will be doswmnt&a by leooris 05; both 
repositories 

To prevent toss a? cfsxa. She server srtouirj not deists sny transferred digiiai work until reseivino: she Sttiai acknowh 
m adgarneni r»om the «}qi«?sie>f Stf :t also should riot use the fiss A we!! kno^rrt way 5o deal with th>s situation is oaiied 
'Two-phase eormiti* or ?:P0. 

Two-phase commit works as foiiows. ih& test phase works ths sam«s as tne methoct dsscossd aim. Ttos sssver 
sends a" of she data so the iequsstsr. Both reposttorfee tmtk transaction (and appropriate sites; as uncorrsn»fted 
The servsr savss a reafy-io-canmii message to m tsqusster; The reqaesSer sends bad? an acimowiadgemeni. Tr* 
« ssiv«! men cowr^s sfd sends tits requester a commit message. Wh«r> the reessster rsesives the conrrsii message, 
st commits the U», 

it sheto is a oomwtm&sm fafott* or other the requester mm checs sack ytm the server to ooiermine she 
status o: the transaction "The server has the last word on ihis. The requester may have receives ai! ot tne cista. fout rf 
st did not get She sifist msssage. * has not coromstJsd The mww cast go tshead and datets fifes ioxcept tor transaction 
fasotdss ones a ccrmtits. stnes ths titas are known to nave »«ss« tusy irartsmstisd bs?ora startina itis 2PC eyefe. 

There sre vsrtations known tn ths ah vvhsch can bs used to ash lave tf >s same offset For axarnpts. ths server couid 
use an addiisorsa! iavol of ss'iciypiton whan transmitting a work lo a ci»mt On<y a'ia; tho cisartt ssnds a ntassagra ac- 
xnowiadQing receipt doss « sand the key Tb* client than agrsas to pay tar the distal wans. TTsa point o! thss va-natton 
;s that it provides a ctaa: aud:! sras- that tne ctscnt received ths work For trcstsd sysisn-:s. hows/ver. this variation add& 
a tavei of encryption tor rto tml gam ;n aceoant:ats)if;y. 

Tne trarisactsoh tor specific usage rights » w discasseo. 

Tha Capy Tfansaotten 

st> A Copy transaction Is a request to make ons or more rrtdepsndsnt copses o! the work with the mme> or fesser 
asttga rightc. CopyaiS't'srs tram !hesx;rac;ioti rtgi-rt oicttiissad -am in fhsi it refers to aniifadsgittsi «fonc&or«mir« ioidars 
containing digisat *orks, A copy operation cannot be used to rsmovo a ponion of a dsgrtai work. 

* The requester sands ths server a message to initiate the Copy Transaction This niassags thdiaatss ths work to 
3S be copied, the ver^on ot the copy rigta to bs used for the transaction, the destination address intormation {location 

tn 3 toiderj tor piacirtpttta work, tha fsie da!a for me wosk (iriofudtng its $m), atidttiij nnniberof copsos rsqec-ssted. 

* The repositories perform the common opening transaction steps. 

* Ths sssva; tiansinrts thr; rsqassied cGiiterns a;id data to the oflsnt sccordir^ to ths transmission protocol « s 
hiex;-Sat-Of-Rfi|hic ttas hear; prr;vspatJ tn ths version ot the right those ncthfs ate if-ssncrn itted as the rtohio far the 

•*o Othsnvise. the rights of the origma! are transmitted tn any event, the Copy-Goani trcid for the copy ol the 

digital work being scat right is set to ths nssmbar-oi-copies requested, 

* The sequester records the work soontonts, data. ;*nd usage rights and stores ths work. It records ihe date msi time 
that she copy was mads tn ths properties ot ths digltsi work, 

* Tns rapoeitorissj perform the common dosing StansaeirGn steps. 

4S 

Th$ Traasf«r Tfanasefitors 

\ ^ n ; s f 1 : ! ^ t t 1 1 v ^ 1 i < ■! ti \ \ s ■> ■> j -j 1 

t U\ i t r s> i t i }.>. x u »> ijt w v v ^» v->^i ) <.•-' 

;'£i 

* Ths req-iaster sends ths sesver a message fa iriitiats the Transfer Transaction. This rnsssaae indicates the work 
to be transferred, She version of ths .transfer right to be ysed in ths fransadiom the destination addrsss infomtation 
for placing ttts vrork.. ths "Sic data faf tl-se work, arid the ntsmber of cop! -3 s invoked. 

* Tne raposlforiss pertorm the common opening transaction steps, 

se ♦ Ths server transmits the requested contents and data to tha mqaester according to the ininsniission protocoi. if 
a f^oxii-Set-Of-Rights has bean provided, those rights are sramraittsd as tha rights tor tha : work. Otherwise, ths 
rights of the originai ars transmitted, m either case ; the Copv-Counf fteid for the iransmittod rtghts are set So ths 
nnsrsber-of -copies requested. 
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* Tm fscjiissler records: 9m work conisms. dasa. and ys&gs fights and ssorss the- we**.- 

* The ssrvsr dserornenis rts copy cones by sne «to of ccpm trsvoived m the iransaefioe. 

* The repositories perform tb* cowmen ciosisg uansaetiem steps. 

* i; ifte riurrst-jr oi copies remaining in She ssn»df is now ,?ero :i otasos She dsgjia: work irorn ;ss memory. 

s 

Ths: Loan Transaction 

A teen iresrissctioo is a meeNtn&m for Starting copies of 8 fiBgilaJ worts. Ths maximum deration of the iosri is- de- 
termined by an im^mat paraffisisr of the digifa? we*. Works am aytomafe% returned a?W a pt&Metfrmm 8ms 
?<5 period. 

» The rsqwesief sends ths server a messsge to mtos ths TrsnsS'sr rmnsacUon. Th<s message mdtt&tes the work 
50 be beeed shs version of she ban ngn So bo ussd in She Sransactm iSie desiiriofjor: address srtforrm&GB for 
pmfoQ ins work, she nnrrrsof ot copses involved »>e fife daia for ths wod-;, and the psnod o? m* war*. 

« • Ths SO:\'S: Cheeks ine vai:d»y OS ine requested ioars period SrtCi ends W:ih an enO: :S ine pSnOd 'S nets Vaiid LOariS 

ior a loaned copy cannot sxlsod dsyoed the psnod of ids ongreai tosn to the mrvm 

* The tef»sstertas padorra Jhe sorarnoo oparnng; wansacitort steps. 

* Ths server transmas ths reqnes-ied eontenfs and data so ine rsquesier » a NsxhSspG;~R:dh:s Pas been provided. 
Ihoss ogfsSs are {j^nsmftmo as Jhs rights Jot ids work. Otherwise, SPs ngtsss oi the oeginai are PariSirstSed.. as 
njoosfsed to rosiest ids ioan perred. 

* Ths reqeesier records she d;p.siaf work contents, dsta. usage rights, snct foao period and stores the work. 

* Ths server updates ths usage rights if;tofn':aS;on in ihs Psotia; work so fetei «'ia nua?be; of oopses ioaoeO ouS. 

* s "ho -oposKonss psrioi-ni She oofnfnofi siosing iransaesion sisps. 

* Ths sosx's: apples iho us^ss nghSs date for She cfig;sa! wo; ■>» s n-s may prsciuds nse- of ths work unti! si rotufned 
}«sm iSre icBsi The user on ths rsqt;oste; psasiofm can mm uss ths transferred oop;s-i; o? sno dfpfei mfk. A nssr 
sccssssng the ofisjsnsi rspos^tory csnnos »ss jhe digital worls . tm!»ss t««rs are coptss tomatninp What happsns 
nsxt dspends on ths order of &v«n;s m sims. 

Cass. 1. 'f iho isrns oJ jho fo&n psnod is noi ysl sjsnaasiod and ths rsppssior sends iho rspossory «• Hoturn 
-S>? msssago. 

* Ths mum msssags inciiidss ths roqsosiaf tdsniifscaison. and im sransactsoo \Q. 

* Ths server tJwfements iSss copiss-if •• use itsici by !hs; Rumoet of copies thai: ware rsinrnsd. (Si ins r;snsder 
oi dips; works reiiirnsd ss pr&stsr iiian ;hs numbsr ses««iltv sorrosfed. mi* ss ireasoo as an snori This 
ssop m&y now maks she work avs;:iapje ai ths sswer for oxhsr users, 

* Ths ropuosis! daacfevaiss :ts cop:ss and rsrswss iha sorsssnis frorp sts rnsrrjory 

Case 2. if the Skr^s oi ths ioan porsod ss exfisualsd ano \w retiaesta; Pas no! yo! sersi a Rsiun; niossaga. 

•so * 'i'Po ssrvsr dsersmsnis ths oopses-fii-uss tsetd by aamber di^itss works ihai wsfs bon'owsd 

* Ths rspnsssei- auion>aiioaiiy dsaciivaias sis copies oi ids dio.ii«i work ii ssnninasos all cufren; uses and 
erases ins PigrSai work eopias ftoni ■rtsmory. Ona «tissf:or; ss why a requesiar wonid aver rsmm a work 
earlier than ths period of vtm ten. since it w'OiJid i>s reluwod automsitcsiiy anyway. Ons reason for sady 
retsm ss that shere tmy bs a rnsierod ise wh;ch dsiermines ths cost os the \om. Rsisn-ir-sg sariy rrsay 

& rsdfjcs 8-m foe. 

The Pfay Trrssnsrsstfen 

A ptey transaction is a rapyes; to isse She contsrjts of a work. Typicaiiy to "piay* a work is to ssnd ihd diortsi work 
vi5 thro«gh sorrsrj kind of transduOer. s«ch as a speaker or a dispsay d»vic<s. The nsqnesi irnpiiss the iriieniksn ihrs! ths 
contsriifs wi not ds cosTirnririicatsd dlgiiaiiy to any osdsr sysfsdi, for oxarnpio, ihsy wiii psjt bo sssf to s printer; rscordsd 
on as5y digsfa: tmonim. fsfainod aftsr ths transaction or sent So adothar repository 

This ierrn s pky" is naSiira; for ssxarn pies iske pSaying nissis. piaying «• rnovis, or piaymg a vidso prna The genera: 
torrs oi play means thai a 6 p!syod is ased so us§ the digiiai work. S-iowevsr. She forrn play covers aii roadia and kinds 
oj feooidirsgs. Thr;s or>e msM toiay K a dspitai work. msaftm§. so tmfot ii for reaping, a; play a computer program, 
moaning to exscipe is. For a digiias PekeS She player would os a dipltesi liefest aeon:. 

* The requester ser^ds she seiyer a nmsage to insists ftsa piay imrss&cttar This rasssago indicates ih« work io be 



21 



&PQ7t5244A1 



piayeo. the version ot tn« stay rtgm to se useo «s the transaction the identity of the piaysr being vised. «ra5 ths tiis 
data for the work 

* The setvof checss she v&katy of Shs piaysr identification sod the compsBBtiay of She piaysr Kje-ntteaior! <tm the 
piayer specification sn She ngnx it snds with an error if these sva nor satisfactory. 

•5 ♦ The repositories partes the common opening transaction slaps. 

* The server and requester react mm w«s tn* nioeks st dfeta as reqyesiaei by 8t* piayer ;sccor«!f}i} so the transmission 
protocol The requests; piays the work conssnis, essng the pfeysr. 

* W hen th» prayer is fir«sh80\ the pteyet »mS the requester remove ihs somsrtts from thsir msrai 

* The repositories perform tns- common eiosino. transaction sreps. 

■c 

Th* Prim Transaction 

A Print transaction ss a request to obtain ihe contents of a work for she purpose of iendering shorn on a "printer * 
We use ths term "printer* so incietie the soffimon case of writing vm mk on paper However, the key aspect of "^tnting* 
« iR esji aso of the torm is that it mates, a copy ot the digites #crk ;n a piaca octskte of tne protect ion of usage riohts As 
with »8 rtgnts. th» may rsquirs eariicsaar authorksibn certificates. 

Once a tSgttai work ts pt inied. the publisher and ussr are bound ey whatever copyright laws are « orient. However, 
printing moves ins contents oats-dc ine centroi of repositories. For example, absent any other snioicemen; mecha- 
nisms, ones a digits! work is pmtsd cm paper. <t cat} bo copied an ortJSnary photocopy rng machines without intervention 
by ss repository to coiieci usage tees sf the sorrier to a osgiiai cs-ss is pentatUKt, then that digital copy is outside of the 
control of usage rights.. Both tns crsator and the u&sr mm this, aftnotiph m§ creator doss noi nscossarify $m tacit 
consent io soch copying, vshtch STiay vioiats copyrrgt;! iawa. 

* The rsqusssor sonds the servsr a mossags to sniUats a Print transaction. Tb-s rnessaga inprcaios tno work to bs 
piayed ifro scisnttty s# th« pnnXw i;«sng rjsoci. the riio data for the «Kxk. and the nufn&c; of mpm in tt» mquesl 

* Tns server chcn:ks the vsitdisy oi ;ns printer identitscaifon am tns cewpcittbsiity of the printer MenjstesaUort with tno 
pmm specification tn the sight, it sods with an error if these are not satisfactory. 

* Iha rsspositartss perfofm tbs cormrcn opening tsanaactior; steps. 

* Tho ssn/er transniif s bfocks of <&m according to the transmission protocol. 
-Si> ♦ The requestor pnnts the worfc conients, PSiop tbs printer 

* Whan the printer is istushrjo:, tha pmtsr ana ;ha raqiiosiar tsrmm the coni:an;s ftom thaif memoty. 

* 'f'ne repositories perform the cornrnor: ciosing transaction steps, 

Tha Backup Transsosfon 

A Sackyp itanraasf ion is a tequast to snake a backup copy of a digital work, as a protection against snedia faittrns. 
in the context of rsposi tones, secure backup copies prtfer from omsr copses m ihfso ways- ■'?} they &r« rnaoo «nd6f 
ths controi of a Backup transaction sathsr ihaa a Copy transaction. ;2.> trrsy do not count as rsquiaf copies, and iS) 
snay arc noi nsabis m sagyiar copses. Ganaesiiy. nacsirp ctspias are encrypieri 
•so Aiinongfi bsoknp copies may be transferred or oopieo. depending on their assigned fights, the onty wray to rnntse 

them useful for piayinq. pnntinq or embedding is io restore fheni, 

Tha ontpui of a Backup epciaifon » boitr m strerypted data ffic thai con'isains tire contents and deaenpiiotr of a 
work, and a rsstciation ttie with an 'encryption Key for resioang the encryptes contents, to many cases, the encrypted 
data fite wouid have riqhta for » prtnting" h to a disk ontsiba oi ii;e pioteeison systefn, reiysng just on ris es'teiyptiors for 
security. Snoh fifes coijid sa stored aeyvvfieiis thai vsas ptrysrcstiy sate and convenient The restoration fiio a»wkt ba 
heid in the repository. This, iite is nacessary for sna resetters ot a backup copy it may have r ; gntstor transfer between 
repositories. 

* Tha requests?' sends the ssiVer a snessaga to initisite a oackcp trancacfiori. litis niessags indiostes the work te 
ba backed up; tha version of the backsjp right to be used in the iransaeiton, *s destinaiion address inionnaiion 
tor p-scing the Packup copy, the fiis cfatis for ;h S ^crk. 

* The repositories, parfprrp .the common opening transaction staps. 

» The server tfansfnitsths requested contetsfs and data to the repoesfer. if a Next-gef-Of-Rigiits has been provided, 
those rights are tninsmitrso" as the rights for the work. Omerwise, s set of Oef»i.iit rights for bsckiip fifes ot the 
■ss oiigtnaf are transmittad by the seivet. 

* The reqisbsior records the work cements, cfata. and usage rights, it then creates a one-time key and encrypts the 
eonisois m. it sstyss the key information in a rastotatipn trie. 

* The iapositoiies perform the common cioerng transaction steps.. 
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in some casos. it is &mmmt to s« abts 50 archive toe targe, enon/pted contents >iie to ottitne storage 
such as a magnelo-optieai storage system or -magnetic tw&. This creation of a rserKspostsory archive fife is as sacs- e 
as e»« cncrycnoo process. Such non -repository ztmm storsg© <s considered a ioms s« "prwtrflg* and ;s contooiieo by 
« pent ngjit with a. specked "rf'ch^'C'Pfl'iig: " An amh-va-pnnts: da-vice :& uiOgia.mmod to save ih<? encvptstS contents 
•5 {tie ihui not tfte descrptort fiN5» o!issn« in such a way ihes it em he re-neved 

A Restore ismacMn is a regessi to co«vsft an encrypted backup copy of a osgitai work into a usabie copy. A 
» restore opesation :& intended Jo be used Lo eorr&sen&ate 'o; catastrophic media fstos Like ait ussge «gto&. restoration 
nghis cars include fw atuS access tests trrciisding aeihwixafcon checks, 

' The requests! seeds the saiva; a messaqe so isiiiate a Restore tmnsae-fc-sn. This massage indicates the work 10 
be restored wsw ot She restore np,ht for m» transaction, the destination address mtoimalior* for placing ths 
« work, and the Site oars- for the work, 

» The server verifies thai she contents ttie is avaiiahie (Is, a dk}« work corresponding to iha request has bean 
backed- up.} if rf is not « ends iha transaction with an mot 

* The repositories perform toe eonwors opmmq transactors stops. 

* The satvef rstrwes ihe key {nam #te restoration isle, i: decrypts the work contents, am, and usage n$Hs. 

* 7fi& server transmits ;ne requested contents and data to m* requester according so toe transmission protocol, it 
a Hexi-SatOr-Rights has bean provided, from nobis are fransnuttad as toe rights for she work. Qshswiss. a set 
of defaoil rights for eaekup Has oi toe onginal are transacted by me sssves. 

* Ths ■aqijeste)' scores the digsiai war*. 

* The repositories psfforpr toe coi-amon ctosssg tfansaetion steps, 

ss 

The Deiste Trans.s«ti*si 

A DeieSa transaciian detetss a dsphai wotfc ot a nai-nbar a; eopias d a d:giiai work from ;s seposslon/ Pfaetioaiiy ail 
di^itas works mtM t«we datefe finite. 

$%> 

* the raq:,ias:ar sends She servsr a -nassage io :nstoite a deie;e transantsors. This massage -ndieairss thts wofh io he 
de-iatoci , the version at tha daiate ngns tor tos transacsbii. 

* The •aaositofies perform !ha eommofi opaninp iratissatsbn steps. 

* The server dstefes toe tits, erasing i) t«m ;na ii-e system 

;k * Tfvs mposisortss psrtorm toe eommon closing irssnssetion steps 

Tfi« Directory Trane-seiion 

A Difeototy tsartsecliofj ss a rsques; tar «^mmHm afjoui iofasrs. digstai vsoars. and m darts This amounts to 
•so rosjohiy the same idea as profociion eodes in a oonvsnticnaJ t:ie system tike TSNSX.. except ;hai d is gansraii^ed io 
tiis tp» power of the access specificatsons of she usage rights Sasiopage. 

The Directory transaction tsas toe mpafimn roie oi passsng aiorsg dsscrspsions of -hs rigtiis and fees assocsaied 
wish a digiiai work, Wnsn a. eser warts to ejsorcise a ngnl toe eser ieterfaee of his repository impiicifiy mskss a directory 
ronuas; to dalerf itine the versions d the right thgft ere avaiiabie. Typtcaiiy thase a;e prssented to the user such as 
■rs witrs diifemnt cnotces of bsiissig tot axsretsing & ngto. Thus, maiiy direaory ?fens«r.t»f«i are invistotrs to the riser and 
are exercised as part ot ins normai psocess of exercising aii sights. 

* Tho reqnoaSsr sends the server a eiasaape to initiaia a Directery transaction. This message indicates the f(5s or 
fofcief that ss the mot of the directory request and toe vers^a of ihe d't rac-ory r ; ght used ior the ifarisaetson. 

se s The server vanfias ihat ihe infarniation is acxessibie to the reqrjaster in earticaiac tt doe;; no- ruJufR tie narrses 
of any him that have a HIDE-NAME status in therr directory specifications, ma t$ doss not rstem the pans ot any 
foiders or f:ies thai have HiDE-PARTS imthait speoftcaiion, it the -trifowistioo ie hot aeeessihie ; the server artds 
ihe transaction visstf; an esfor 

* Tea repositories perform the common ooeninp transaction steps, 

se ♦ The server sends ;h« r eq;josied dato to tfia requester according to -hs irsnssrmtot) piotacd. 

* The mquester records the data. 

* TPs repositories pertofm the common csosing tmpssction steps. 
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Th« Fokfef Transaction 

A Fotaer transaction ss a rsqaest to create or rename 3 lefeter. <x io move s worn between totoers. Together w«s 
Oaeciory : ■tjhit, f-oider aohta eoniroi t.ne dep/Ce to wh:ch organ-yahon o' a sopository can bo acces-sad c." rnoo'Sied 
•5 from arsotfiar repository 

* The requester sends She server a message So initiate a Foider Sransaction, This rnessage s-tdmtss Jhe foidsrthat 
(s She tos& of the fotder request, the version of ins toidar r^hs for She transaction, an operation, mi daia. The 
operation ©so tss one of create, renams and move riie. The data are trie specifications asquiroa sbr ins opermiofi. 

?a such ss a spscitoliOfi of a totder or digstsi work ana a name. 

* The repositories perform ihs; common optmm$3 transaction stops. 

» The server performs tha revested operation ■ • creasng a foteer, warwo, a foider; or moving a work between 
Sokiers. 

* "no reposisortss partorm She somnxm siosmo. transaction asps. 
The Extract Ir&nsaefiem 

A sxisscS transaction ;s a request So copy s part ot a dioriai work and to create a new worfc containing it. Ths 
extraction opessPao differs horn copying «\ that it car; be issod to separate a pass of a dipiiai work fnam d-biocks ot 
sheiis that piace addifsonai restrictions or fses on ii. The extracfion operation differs from she edst operation m thai it 
doss not chanps she contents of a war*, onty its embedding in d-fjioeks. Extraction creates a new tiigitai work. 

* The ipqnesUtr sands she server a messape to initiate an Extract transaction This mec-sags indicates me par; ot 
the work to be e^Patied. the version ot ths extract right to be yseei tn the transaction, the- destaatioft address 
informs-m for p^osng the part as a rirsw vroik, ma t;io daia tor the work, ami this number of copies :nv;sSvaoi. 

* '"no roposiioftss pertorrs iiia cortsfnofi opening iransacacn steps 

* The servsr jransmits ths ■•squesioa conts^ts and daia to rha reaijesiar aocordtng ro tfte tfari8;Ti:ss:r;n: protocol if 
a NexS-S^Or-Riphis hm bean p;ov(dad ; sheas r^hte ara f^ismfeed as tf;o cighis tor m mm work. Oifterwissa, 
th* righisot the oripiaas am \>mm8X®3. Tbo Copy -Cowai IM for shis rrghf js saf So tha msrm&t-GH-oo&m r oqijosted. 

so • Ths rectPsstar rseoras the coatsnts. data, and psaae riohts and atoras tiia work, it recc>:rds the date and tipis that 
now work was mado so tha pfopsitios of ths work. 

* The repositories psdorm the condor: dosing t;Bhsactron steps, 

Tho Embed Transaction 

to •strsisad aar;sactroa is a rsqusst So aiake a dtgiaai work become a pari oi another digital work or to add a shsii 
d-siopk to enahia the adding of tess by a disihbaior of too work, 

* Tito roqnestssr srsxis ;no arsrvar a ?r>as;:aga So srifiiata at> Ernnod Sransapiion Thts ino$;aago iftdicaass the wcaH to 
•so no mntmtjafi, {he vorsion of m« srnbsd n<#\l to op osed in ii>a p'ansaciion. ins dsstMtson address (nformatRW 

Sot piacinp the pari as a a work, the file da;a tor She work, and the number of eopios snvoivsd, 

* The server checks the coniroi s-pecstications for aSi o: She sights iii ths part and ihs tSestinatics*. if ihay are nconv 
patibie. tiie ssrvar oada tos transaotiop wtih an oaor. 

* The rapoaiiortss perform the comraon oporiifsg tfansacfior; steps. 

*s * Tito sorvar Snisasniris ino ivjcatosiad pontartSs and d;sta So me requester aonordtnp; ;o the transmission protocol, if 
8 NeKj-Sst-Oi-Rights nap nsen providsd, iho&s ngnts ara usnsmmsa as too nghts for the mw swxs. Gihsrwiae. 
She fights of Shsofigsnai afotran&rairiad. Ths Copy-Coynttteid for this fight is set to She aiandoi^oS -copies rsqaosSed. 

* Tho roqiiesiar reccsrsSs Sno pantanSs. data, and arsarjo s-tphta and rsrabods She work- in tha destination fiie. 

* The repositosies psrforrf; She corrssors eiosrnq transaction siepe. 

;'P 

The Edit TrsnaseSrsn 

Art Eos f rsinsaciion is s request to rftako a r;;?w dirjiisi work by copying, soiasting and mxMyxtg pojtsons oi an 
axistinq digtta! worst. 'Shis opsraiton tan ach.taiiy rmaapo ;no poniems of a tflgi'ai «o:k Tha sanda oi pnangrrs tnai ate 
•ss permitted depend on »>« process bairip used, tike the exiraehoe operation, edit operaSes on persons oi a dtgriai work, 
in contrast vsrith tho e-xiract oper;P:ioa. ooitdoos not a^eci She aphtsorioMiiiors a? the work iionty charts the contents. 
Ths ktnds of chartosa pormilfed ars dstsmiinsd »y ths type specification of ths proosesor spsoifiod in rha rights, in the 
osrr ontiy prelersed ernaodirrient, an edit f ransactioti chanrjes the work itseif as)d doe* not nsake « o*w vvork However. 
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it would be a reasonable variation t© tmm a nsw copy °' trta werk to be matfs. 

* The requester sonds the ssrvor a rossssga to sn&sts so Edit transaction. "fTus message indicates fbe work to b3 
edited, the vsrstoo of the ®tf« figm to be used in ths transaction, the tile data lor the work (tneftiding sis eare), tns 

•s process-tO lor th«f process, and she nwtftsef of copies itwotvsd. 

* The server checks the oompaitfeility of tfis process -:D to se im<$ ey the requester against any pKscess-50 spoon 
Imttkm s'i tlia he/st. If they are Incompatible, ii ends ibe transaction writ; an mot 

* The repostatas perform Ins common parsing transaction steps 

* The requester uses ins process to chaooa ibe contents oS the digital wotK as desired iFor sxampie. it ears seise! 
?<5 arsd duplicate pasts ot it: cotrtas A with other infonTtsfiofi: or compute functions based on 8te information. This 

can amount to sdritngtex;, tmsfc.. or plcsures or taking wbsievsi others! ope are usetui in creating a derivative work. } 
» The repositories perform the common closing Usnsactico stops. 

The edit transaction it; used to cover a wide ranee oi kinds fit wor ks The category describes a process that lakes 
« as ris inset any ooPion ot a digital work and then: modifies the input in some way Por example, for text. a prosees for 
editing the tmi would rsQusro srfst rights. A proc lu > (! »t o t > \ < t ^ 10 * 

cemsKfsrsd edistng. For a muse ttls processing cotiw awvts <•■• >r>' t i - t\ < >c nc 0 u s ns 

of any ottwsusfio sSsct For digits video worts. •> V" * ^ * >■> \>> •>( •'v t\ *\ " 

would be eoloris!fjg ; scaling, extracting still photos <» < u t" ~>v i > > »<«<•> t i s » > > * 
signal processing, and so en 

Some creators may mn\ to sooted ihs **«ht m,» > ^ \ ^ s / 1 i xj ^ i\ N fu ^i,^ v? i 
psstarrisci ors mem. \hhnm ass m &ih > igfHs. $r&<\ <. w j v jksvt Xp' ^< in ^< >> ' j << 
to sssscify wtsta fcifKJ ot prcscass <s a!»ws<i. It no is > A itn 3 ,>t > •> t' <. -\ v i >> n 
For an sxampts ot a sees* ofocsss. » smotogra \ i » ( i v - ^ i u to \ -a > n * i 
«otofl2«d. A mtisfclun ttmy vs«?>t to iiiiow sxtra o •> > > •> a is > i u \j o ^ ) 

Authof!t?&t!ort Tr^nesetions 

There are msoy ways that aui^oftfstion irensjsetioiis oao be deiieeo. in the foi'owing. am preierred is to&mpty 
se deisri-s inerri in xmms of other jmrisactions that ws aireact;/ need to rspositoftss. Thus, it is convonisni somoferms to 
spetskot ■tsuthor^aiioe iraesaosioris. ,, &iii ihoy e:eacti«;;:iy!Ti<}do epoi ^hertranssicisons ttiat reposstortes <;ir$ady nave. 

A ussssje ri^ht can specify an sussorasaioiviD. mm identitsee an auSwxaios* osject ;s< digitai work in a fife of a 
eiancterrj fama!) that the rapoaifoiy must have ana wrk^ ii most process The a;;!hofHsrisoo is gwer, to she generic 
acinofixatioe {orticseti server oi the rseostton/ vtomn : bep<ns ;o interpfat ihs aothoi's^titson. 
-5S As descripssd mdm. the authorisation contains a server identifier, wiileb may just be the generic authorization 
sssver or «t may be another server Whan a rmxAa au-hosixaiton sesver is required. Ii most contain a dlgsiat address; 
it may also eontsio a digital certificate 

if a remote authorisation server is required, then The auttrorisatiers process fust performs She Soitowleg steps 

•so * The gsnara fiijt:hor«at:en server attempts to set up ins soiTimunieatioes channel, iif the ceaoeoi cannot be set 
up. then authorisation tails with an erixsf.s 

* VVhen ttis chamei Is set up, si perfoinis a regssiratsoe procsss wrth the remote- repository tli rripsstraisor; faiis. then 
the authorisation falls with an error) 

* When mpistraiior; is ecsmpisse. the eer-enc auttsorssaiiori server l:?vokes & k P:iay° transachou with the remote ro- 
pessary, sitpptyino she ittrthon^tiiton csoeerrieivt m the dipitai wortc to be pteyed aod the remote aalhoiwatton server 
fa progtam; as ;na "pteysr. " fit the otsysr cannot os teond or has some oinar error, then She auffioraaiion fails with 
srs emon > 

* The euthorivaijon senrsr then 'plays'" the ratlhonzatsen This Invatves senrypsleg it using wmt the public key of 
the ptmm rspossoty $hst issued the ce;trt;cate or the eessson key Irom the repository that i;ar;sirr:tfrjd it. The 

vi5 autborisetion server then perfcrrns various tests. These tests vaty according !o the aetlwasiion server They 

ineiuris such staps as eeaeking Issue and vaiiotty oates of the smiwistatron and enacksng any h<5t-lisr.s of known 
irtvaitd authorisations. The autborisation server may tmsw carrytng out any othes transsctions on the repository 
as sell, such as checking directories, geiling sonje person to suppty a password, ot playing some other digital 
wortr It may atso invoke some special process for checking iniornrarion about locations or recent eirenis, Tne 
"eertpt* for sech steps is contained will^n ;h« auttsori^ahon server 

* if alt of 8t©- required steps are completed satisfactorily: ins authorization server completes the transaciion norma iiy: 
sigealleg tnat auttiorixatioo <$ granted. 
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An ir>sS3» transactes b a roq-n&st jo ins-si: ?• i$$m wans as runnabio software on 3 rsposiiory in s iypscet case, 
the requester repository is a rendering repository and the software woufd be & new kind or new vsrstofs of a p layer 
•5 Aiso in a sypscsi cases. iha software wocid be copied k> Ills system of the rsqussisr repositoty before * k insiaiied. 

* The requester sends ths &s«vor an install message. This message indleaiea the work to bo snsiaiisd. ihe version 
of She snstaii ngn; being invoked aodlhatfte tittia tot the wotSs tinclndmg its m&< 

* The repositories perform She como-ion opening transaction stops. 

?<5 x 'i'fie requester estraeis a copy of ihe dipsai eemiicaie for the software, st iha ceriiiicaie cannot be found or the 
master repository for she certificate not known to She request©: the transaction ends with m ©frc-s. 
» The requester oecrypss the ciigiiai ceristeHo Desna )f*s oubfo key at e(i« master ropostoy, recording tn» identity 
of Sss supplier and cfeator- a feey tot deciypllnq the software, she eompaf ibikty (nformakoo. and a tarnpercbeclang 

COdO. (MS Step CS-nif:«S !?1<i! S«ft«8at*..} 

w • The requestor decrypts, ihe soiiware using the key from me certificate and computes s check ooae on '1 using a 
t -way hash function, if She chack-code does not match the tampai-ei-ieciertg nods t«jm the certificate, ihs instai- 
ianon transaction ends with an error (Tim step assams that ;ha {Stents ot ihe software, including ihe various 
scrtpls. have nef been lamsered with.; 

* The requester retrieves ihe lustres-kins m she compafibikiy-chacking script arid fdfows ibem if ihs softw&ts is no; 
compatible: watt the repository the irsstaSiatie?? hans? : c;ion ends mm m error, -This step checks pisiform compat- 
ibly.! 

* The requesier setrloves the inspections in the installation senpi and follows them, ijihere is an etrot in this process 
rsech as insufficient resources}, ih-sn ins trans ac; ton ancis wsif! an error. Hole ifru- she insiaii&tion procsssputs in$ 
Kinnabic soiiwa'Si in it place in the repossiOfV where it is no longer aeceseibfe ae a work for osensising any ussgs 
r:gf;is Gii50f Shan the «xect.:t:Of} of -he software m psst of reposskssy opafatsosis « r:anying mA rsbai transac-fona. 

* Tpe ropositofiss perh^rrs iris comnion c'osing frans?!C:ion steps. 

T,H« UnsnstaSt Ts-sosastbn 

An Unlnstsif -rafssaption Is a request to remove so&wars from a i-eposiiory- Since encomroiiop or Incorrecs r ernovai 
of s;5tisf<!;'!5 from a ispossioty <;ot;-d oorspromisa lis bahavirsral ismsgtity; th» siop is conuoiied. 

* The ftsqussief sands the sewer an Uninaiaii fneaaaqo This rrwssaps lijdscaias >ha work to be aninsSalied : iha 
version oi t he Unins-sii rsgnt bssng invoked, and ino kie d?-!a tor ihs wo* finciijosng its mm) 

3S * Tns i-oposisohss perform ihe ■eoiw-cn opening iransaction steps. 

* The raqnasier exkacia a copy of iha dfctilni cedt'tcaie for the sofiwars. if tfcs csittoi© canr;ot he foand" or ;ha 
innsier ispceifory tor ihs eenifieate Is noi known to the ii'squesier ins iiansaetion snds with an error 

* The rnqticste; checks whether the aoitvsars ta instaiiad. if iha so'fwara is not masaiied, iha iransaailon mtis with 
an airoi. 

•so * The rcquosrer aecrypis the ciigtiai cedikcaio ussno ihe pribi-c key of ino master ispcsiiory. record-nq tne identity 
oi ihe supplier and creator, a ksy tot aectypiino the software, -ha compst^HSslv inf ormaiion, and a iatnpsr-checionq 
cosia. (ftm step aiahanfscaiss the eaiishcaiion of the software, including ihe sc«pt for anniaiassing It.) 

* The requestor oecrypis. ihe soiiware using the key incm ine esi'tiiicafe and computes ?t check cods on w using a 
t -way hash function, if iha shack-cods does not .match the tampes-chscking code from the csrisficaie. iha instah 
iaiion iraristsoiion ends w;;h an aires: (Tfiis step assays tftnt iho o^-sionts o* lbs software, mskidsng ihe vsaous 
scripts, have nci been iantgersd wsth. j 

» Tha iequesies :eitievae Ihe ir;s!reeiior!a in iha ursinsfaiiaibn scapi and Soitows Ihem if iheie is a;^ 0)ror in this 
process (stjch &s instiffiotsni resources'), shoo ihe irf-nsaction ends with an error. 

* The repositoftes psrfom; the cornaior; tfomQ transse-ion steps. 

;'£i 

1 A dtsfhbiifion system for disifipiiiirig digital works, said ciigifai works haying one or more uetigs righis ajtacbed 
iiicrofo, ssid dssilhaiiofi system comprising: 

s giamiw tor creating Instance* of usage righfs Indicating a manner by which 3 possessor of an assocsaisd 
dps! woik ::-r-3y trai-sspod said associaled dsgtisi work: 
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means for creating esage ngrsts ftom said pwar: 
weans for attaching created us^gs tights so a dsgtiai work: 

a regyester repository for sccssstrsg dwjsisi work*, said fs^osstse repository Slaving mssrss for gsrwsr&tmg. usags 
transactions, each sasd usage transaction specifying a us&gs- right: 
•5 a ssrvsr tapasisory for siot^g diqsfai works wish attached ctmXwi usage ngfsiB, sski ss;ver repository having 

mean*, for processing asage transacnons from ssxi requestor rsposflory so c<stermm» ff access So 8 dsgssai 
work (nay b© granted. 

2, The distribution system as reciserj in Gasm ; wherein said grammar turtiw specifies a def auf; pbxzfflbfdt eocditsorss 
?<5 to; an instance of & ysags right, wherein said oris or more conditions must J>s satisfied before sakJ usage right 

rossty Pa exerctssd, 

3, Trss distnbusion sysiert; a& tectSsd m Cfeltn 2 whetem satd rneanss to; crsattrsg usaq® nghts Jrom said grarninaf is 
torther comprised ot aw tor changing said dsfeuit piuraitfy «« ootmtem for an instanco ot a tssags rsgtn. 

is 

4, The distnbusion sysssrn as tscrtsd m Ctakrs 1 wherssn said diqisai wot*. as a software program, 

5, The distrirxstion system as recited in Cteam s whsrsifi said grammar ss kstinsr for creating a fust version ot s us/>^3 
ngtsJ having a fr/st sot o; conditions and a sscond version of sasd usage r*gto having a secosxi seal at conosiioi <t 

so 

8. A computer bases systsm for eomroiiing distribution and ess of dsgsiiai works composing: 

a sjsaga ngnts for creating instances of usages npfe whien defiiio how a digtta; work may oo smcs 

or distributed, said usage rights grammar 'Comprising a first pfura&ty ot gramma: eiemente tor defining transport 
s$ usage right* anes a seconcs piuratisy of grammar ssfenwsts for doiinirrg tsndsnrtg usage iighss: 

means for attacning usage fights Sr> cssgifai works; 

a pioraiity ot repositories for storing sod exchange digrsai works, asetr of said piuraiity of repositories 
carspns^g : 

means for mm$ digifat works and inm rsttaohod usago rights; 
-5* iraosaotton processing means having a requester mods of operation for requesting access io a requested 

digital work. 88»3 rarest spisoifyioii a uaags s ighs, and a soivar mo;3o oi opsrasbn for processing sooijosia so 
access said reqiiestoci diqstat work d&sed on eaid usaqe rigdt specified m said request and She usage rights 
aisachaii to said requested digsiat wos;k. and 

a coiipisng moans tor coupling to anosnor ot sasd pi;j« : ;:Sy ot ropossforfss across a oomrnunioations moosum 

?, The computet basset systeos for sositfoissng diisirih-jt:or; and ttse of digital works s*s !Bc:isd sn CSa«n 6 whsnsin said 
first pfs.traiity of grammar eieroents s comprised ot: 

a torn grammar a-amanf: f;sr enabiifso a rfigiiai work so ha icssnod So anoidor rapository. 
•so a copy grammar cfomsnt tor enaOSiag a copy ot a dsgitas work so be mads and iranspor fod to anoihor repository: 

and 

a ssanssso! grammar aiorrsani for snadiisig a dfgitai wotk to m tsarssseriod so aswtt)er ■opos:f:oiy. 

6, Tfsa compul«( basad sysien; to; eoatroiiing distrihsjtjori md usa of digital vmks as rscised In Claim 6 or Oiami ? 
*s wharain said socorsd plummy ot grammar aseioents is comprised ot: 

a piay gramririir aier* -ani for a;iaPii;?g a digitaf work to de rertdarsd or; a speeded ciass ot pfayer device: arsd 
a psni grammar aiorrsi-snt for anabiina a dsgstaf vsork to bo printed en a spocifiad class ot printer dsvioo. 

vi5 9, The eornpasor Msed system for controiisng dssfrieytioe and use o; dsgiiai works as reciiod in aiiy oao of Claims 6 
te 8 whsrsstn said gramma* comprises one or more forsnsr piaratitiee ot grammar essmsnts, for dotinsng tiis man- 
aqerrseot ysags rfgiits, for snaoij;ig a digitas work to be rssed io the creation of a new ciigsSai work.ior enauSng toe 
secaso is?siaiSasbn ;s;nd airinstaiiaiion ot siigitai works comprising of sottwara ptogtsms. ot tor providing si set: of 
creator specitied sonpitions whteh mass fee satisfied tor each instanSiatioe ot a i.isaps right defined Py a gramroar 

J-' aiamai^t 

18. A method tor c&nfswffirsg tfisirJxRton and use oi digital works comprising the steps- of: 
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a) creating a ssi of ysags rsgnts item a usage rights gramma*, each ot said usage fights defining a specific 
instance of now a dpsai «wk «ssy ussd or dBSribiJtcd. each of said usages rights specifying one at mewe 
ccncii-cns mm must be ssasfosd w ore&f tor sates usage right to be sxsressed: 

b) attaching said sat of usage rights to a dig;tai work; 

c} mothg said digi-at vrork and its attached usage fights in a firat tapossofy: 

di a second repository tmMng a mquasi is access said digstaf work in said first rsposiiosy. saw requsss 
specifying a us«ge fight; 

a) s»<d ftnst reposftoty weaving sate; r«qsjss$ from s««d second repository: 

f) satd tirst repository ctet6w»niR9 it said specified ussgs fight is attached to said digits work; 

9> said first repository denying access to said d:giiai work 8 said ids-fshhsd sjsags fight is nol 3tSad)«d so said 

digits! wotfc: 

h) :? sad identified usage ngh; is ahaenect io said digdsi work, said first repository oatenr-ininc; if conditions 
specified tsy sad usage right are sahshsd: 

i| if said conditions are r;oi satisfied, said Srss repository denying access to sates digitai work: 

it it said conditions are satisfied, said first reijosifory ttaftSiTiiiiino said digitai \- <wk to ssud secoad fssessiioiy 
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1581 - -XHpty Work Eights: - {Right's*) 

1S82~~m&i : * (Right-C^e {Copy^eaal) fOostrsl-Spsc} -ffime^pec f 

C«d«| Berh-ativs-Works- Code ] Cftsfip^aiwa-Code 
? 5$4-...Rmdm>€Q&z ; « | Pky : {Pkysn Pky«r-©} } Prist: {Fdsfer: fcrfeter.®}] 
wTmaspsrt~€e<fe : * (Copy { Tfcms&r j Loss fK&mlswng-iigta; 

f|fe.Maaag*«s»»i4?od« ; ~ Backup |B&«k-tVC^R%iit8: 



1 S07-~«sri¥sib«-Wsrk$-C«d& : ™ (Extra* | Bjafesd j IditfProceaK 

Ne^-Ssfc-of Rights} 

fsm^-mx^mmighu — ham: m^m^mufm^i 

SefcOm&m} {CBeptece: 8*M>f~EigMs )HtKeept $*t~Gf. Eights }} 
1Stl — Caa^JMSfKMs < « <C«8tr»lt pteatrfct&bfe I Usmsstmtafele} 



1 5»-w -flxe44steraa := From: asstrt-TSmft 
fff4'wSBdi«g«lat«jw^[ ; ~ Interval; Ua^But&tisa 

ISt A«*e* s .%*c ; « ({SC: Sae«rity<€kss} {Autfaerixatiaa; Autk»rairfiim-XD*} 

lOthgr-AiJthorixatioa; AatAorkatioa-iD*} {T kketc ticket-ID}} 

Markup-3pec 

{Tim^Sp«€ Farmtfage}*} 
?S«~~ Begular-Fse^iwc'^ ({Fee; j foetal*?*:} {P^Uss-Spee | M« W-Bate- 



f 5 20—-F«r-Hs&.Sp«©; ~ p er 4Jse: Measy-usfc 

f52l"-M«t«r«d.Rstt«.Spee : «: Meters* Md^UoitP^ Tim*®p*c 

?S22— B*st.Pric9-8p«c Best-Pnce: M«a«y,aaitMa«j Moa«y-»mfc 

f$H— Ca«.F«r.Pric«^i>«e ™ Call-For 'Price 
1 $Z4^-> Scfc«dta«<i-F«e»%6«: ~ (Schedule: (IWSpse ReKute*-Fw43|»e>» } 
f$2S^Mayktt^%ec: ~ Markup; perc&Btage T«: A««mai~n> 



Nsxi-SeS^EIghte} | lifers f Mats] FoMer 
i »ii"sctory {Nam* HMs-Lecai | HHa-towte) 
{Parts: Hi4e-L«:&i j Hide-ikmote} 




Spec ( Besi-Pnce^psc J OaH-For-Ftfce^c} 
{Mis: UmsfASmt Per: T&w^H&fax: 
Mojisv-Onit Per: Tim^Spec}f a AscoukMB) 
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EUROPEAN SEARCH REPORT 



>.P % ID 841? 



DOCIJM Fail's CONSIDERED TO SF RELEVANT 



OtxSi&ts i.4 ■$»oi!t«Mt w«t* j}i!MKti<'»* where xBSH-'jtfcixSe, 

2MZZ (DIGITAL EQUIPMENT CORP.) 

* pa§« ^, line 10 ■ page SO, line 15; 
figures 1.-43 * 

* the whole «Socaa®ot * 

236 504 {$t& HKS>0S*$^$ INC} 
<3. nns- ts - sag? ?.(). Hue 15 » 
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